Rename /admin for protection

no one...?

OK finally after few hours of heavy digging, I found that there is a bug with globalredirect module and custom_url_rewrite_inbound causing it an endless loop.

Anyway, I had to apply the following patch http://drupal.org/node/327695, included here:

Index: globalredirect.module
===================================================================
RCS file: /cvs/drupal-contrib/contributions/modules/globalredirect/globalredirect.module,v
retrieving revision 1.1.2.4.2.5.2.14
diff -u -p -r1.1.2.4.2.5.2.14 globalredirect.module
--- globalredirect.module	22 Dec 2008 10:34:32 -0000	1.1.2.4.2.5.2.14
+++ globalredirect.module	11 Sep 2009 16:52:39 -0000
@@ -129,6 +129,15 @@ function globalredirect_init() {
 
     // Find an alias (if any) for the request
     $alias = drupal_get_path_alias($request);
+    
+    // if the returned alias is exactly the same as the request,
+    // that means that there isn't an alias in url_alias table
+    // so now we check for custom_url_rewrite_outbound
+    if ($alias == $request && function_exists('custom_url_rewrite_outbound')) {
+      $options = array();
+      custom_url_rewrite_outbound($alias, $options, $_GET['q']);
+    }
+    
     if ($prefix && $alias) {
       $prefix .= '/';
     }

In addition, to block hackers accessing /admin and /user I added the following code to the end of the custom_url_rewrite_inbound function at settings.php:

	if (preg_match('|^admin(/{0,1}.*)|', $path, $matches)) {
		$result = '404.html'. $matches[1];
	}
	if (preg_match('|^user(/{0,1}.*)|', $path, $matches)) {
		$result = '404.html'. $matches[1];
	}

Hope this helps someone...