By freehunter on

I have the front_page module installed, and I have it set to redirect my users to site.com/closed_registration. I have a php code that turns off all the side menus if you are not logged in. Problem is, there are still the links across the top, Drupal.org has them as well (support, handbooks, forum, downloads, etc). Using those, anonymous users can fly right through my forums and browse the groups.

Normally it would be best to let them see it and get interested so they will sign up, but the main draw of my site is that it is invite only! If anyone can come in and browse the goods, why bother seeking an invite? I tried taxonomy access control and I set a category for groups, then denied viewing rights to anonymous users, but then I log off and browse right through all my group homepages. THIS. SHOULD. NOT. HAPPEN. Why is it so hard to turn off the top menu (I am using the theme internet_center) or make it so any page that the visitor goes to redirects them back to site.com/closed_registration? If you supply me with any php hacks to allow this (which I very much welcome, because if my site were live right now I would be the laughingstock of the internet), please tell me exactly where they go in exactly why file, I am not very familiar with the structure of php files, and not in the best mood right now.

Drupal is the only CMS that gets close enough to what I need, and my needs are complex. It is easy to make it do amazingly powerful things, but it seemingly can't do the simplest things like basic security without core hacks and modifying modules, not to mention the forums keep piling up with questions that never seem to get answered. Probably the people who know how to use Drupal are too busy enjoying it to leave their servers :p

Hey look, I cracked a joke! Must be the fresh air outside of the dusty, cluttered admin menu...

⋅ Categories: Drupal 4.7.x

Comments

heine’s picture

heine commented

Problem is, there are still the links across the top, Drupal.org has them as well (support, handbooks, forum, downloads, etc). Using those, anonymous users can fly right through my forums and browse the groups.

I get the idea you are trying a security by obscurity approach. Why not use an access module (eg node privacy by role, Taxonomy Access Control, Simple Access)?

--
The Manual | Troubleshooting FAQ | Tips for posting | Make Backups! | Consider creating a Test site.

platypus media’s picture

platypus media commented

How about something like this? This code isn't tested, but it should work, with some possible minor tweaking. This will only display the primary links if the user is logged in.

<!-- This grabs the user info -->
<?php global $user; ?>

<!-- Checks if the User is Logged in and can administer nodes -->
<?php if(($user->uid) && (user_access('administer nodes'))): ?>

<!-- Checks to see if there are primary links and creates an unordered list -->
<?php if (is_array($primary_links) && !empty($primary_links)): ?>
<ul id="primary">
<?php foreach ($primary_links as $link): ?>
<li><?php print phptemplate_wrap_links($link, 2); ?></li>
<?php endforeach; ?>
</ul>
<!-- Ends the Primary Link 'IF' statement -->
<?php endif; ?>
<!-- Ends the User 'IF' statement -->
<?php endif ; ?>

Mike

freehunter’s picture

freehunter commented

I am using Taxonomy Access Control, but it is not blocking groups for some reason. I made a cetegory that includes everything but groups, and set the access to deny all, and they can still browse groups. And I would like obscurity, because it is an exclusive site, and the visitors should not know what there is to offer uless they are invited to join.

Mike, I am not sure where to put the code you offered. I tried template.php, but I got errors and don't know enough php to fix it. I want authorized users to see it, not just admins, but I don't want anonymous users to be able to access it. Thanks for the help, though.