Skip to main content
Drupal is a registered trademark of Dries Buytaert
Release: OpenID Connect / OAuth client 3.0.0-alpha9 New alpha version released for module openid_connect (3.0.0-alpha9). Release: Opensolr Search 4.5.0 Minor update available for module opensolr_search (4.5.0). Release: Timelinr 1.0.1 Minor update available for module timelinr (1.0.1). Usage Milestone: Simplify Module simplify crossed 10,000 active installs. Usage Milestone: Views Reference Filter Module entityreference_filter crossed 10,000 active installs. Usage Milestone: Dropdown Language Module dropdown_language crossed 10,000 active installs. Usage Milestone: Paragraphs Browser Module paragraphs_browser crossed 10,000 active installs. Usage Milestone: OpenAPI Module openapi crossed 10,000 active installs. Usage Milestone: Decoupled Router Module decoupled_router crossed 10,000 active installs. Module Revived: Entityqueue Buttons 1.1.2 Module entityqueue_buttons updated after 8 months of inactivity (1.1.2).

User Restrictions

1,064 sites Security covered Drupal 10–11
View on drupal.org

This module prevents users from registering or logging in based on their username, email address, or IP address to combat spam. It offers pluggable system for custom restriction types, building upon the base functionality of blocking based on name, email, and IP.

This module blocks users from registering or logging in basing on the entered username or email, or on the IP address used to connect, making it useful for fighting spam accounts.

This module is a drop-in replacement (with some enhancements) for the access rules functionality which was removed from Drupal 7.

The Drupal 8 version implements plugins to allow custom user restrictions to be created above and beyond the name, email, and IP plugins included.

Alternatives

  • If the intention is only allowing or restricting account registration basing on the domain used by email addresses, there is the Restrict Domain Registration module
  • To validate email addresses using advanced, configurable rules, there is the Advanced Email Validation module, which also allows to verify the domain used by email addressed exists and has MX records configured
  • The Disposable Email Address Blocker module protects Drupal form email fields by disallowing email addresses from a custom blacklist of disposable email address domains

Depends on

Dependencies of the latest stable release

No dependencies recorded for this project.

Required by

Tracked projects that depend on this one

No tracked projects depend on this one yet.

Activity

Tracked releases
16
Tracked since
Sep 2025
Latest release
4 days ago
Releases (12 mo)
16 ▲ from 0
Maintenance
Active

Release Timeline

Releases

Version Type Core Release date
3.0.0-beta5 Pre-release 11 Aug 27, 2026
2.1.1 Stable 10–11 Aug 26, 2026
4.0.0-beta4 Pre-release 11 Jul 29, 2026
3.0.0-beta4 Pre-release 11 Jul 29, 2026
2.1.1-beta4 Pre-release 10–11 Jul 29, 2026
3.0.0-beta2 Pre-release 11 Jul 15, 2026
4.0.0-beta2 Pre-release 11 Jul 15, 2026
2.1.1-beta3 Pre-release 10–11 Jun 26, 2026
3.0.0-beta1 Pre-release 11 Jun 26, 2026
4.0.0-beta1 Pre-release 11 Jun 26, 2026
2.1.1-beta2 Pre-release 10–11 May 21, 2026
4.0.x-dev Dev 11 May 21, 2026
2.1.1-beta1 Pre-release 10–11 May 19, 2026
2.1.x-dev Dev 10–11 Oct 12, 2025
3.0.x-dev Dev 11 Sep 18, 2025
2.1.0 Stable 9–10 Sep 9, 2025