Drupal is a registered trademark of Dries Buytaert
Protected Pages 3.0.0 Major update available for module protected_pages (3.0.0). Commerce Core 3.3.8 Minor update available for module commerce (3.3.8). Search API HTML Element Filter 1.0.7 Minor update available for module search_api_html_element_filter (1.0.7). Layout Builder Reorder 2.0.1 Minor update available for module layout_builder_reorder (2.0.1). Ban 1.1.0 Minor update available for module ban (1.1.0). Field Formatter Range 2.0.0 Major update available for module field_formatter_range (2.0.0). Field Formatter Range 8.x-1.8 Minor update available for module field_formatter_range (8.x-1.8). Varbase Media Header 9.2.1 Minor update available for module varbase_media_header (9.2.1). Search API Solr 4.3.11 Module search_api_solr updated after 14 months of inactivity (4.3.11). Provus Mega Menu Module provus_mega_menu crossed 1,000 active installs.

User Restrictions

1,095 sites Security covered
View on drupal.org

This module prevents users from registering or logging in based on their username, email address, or IP address to combat spam. It offers pluggable system for custom restriction types, building upon the base functionality of blocking based on name, email, and IP.

This module blocks users from registering or logging in basing on the entered username or email, or on the IP address used to connect, making it useful for fighting spam accounts.

This module is a drop-in replacement (with some enhancements) for the access rules functionality which was removed from Drupal 7.

The Drupal 8 version implements plugins to allow custom user restrictions to be created above and beyond the name, email, and IP plugins included.

Alternatives

  • If the intention is only allowing or restricting account registration basing on the domain used by email addresses, there is the Restrict Domain Registration module
  • To validate email addresses using advanced, configurable rules, there is the Advanced Email Validation module, which also allows to verify the domain used by email addressed exists and has MX records configured
  • The Disposable Email Address Blocker module protects Drupal form email fields by disallowing email addresses from a custom blacklist of disposable email address domains

Activity

Total releases
11
First release
Sep 2025
Latest release
2 days ago
Releases (12 mo)
11 ▲ from 0
Maintenance
Active

Release Timeline

Releases

Version Type Release date
3.0.0-beta2 Pre-release Jul 15, 2026
4.0.0-beta2 Pre-release Jul 15, 2026
2.1.1-beta3 Pre-release Jun 26, 2026
3.0.0-beta1 Pre-release Jun 26, 2026
4.0.0-beta1 Pre-release Jun 26, 2026
2.1.1-beta2 Pre-release May 21, 2026
4.0.x-dev Dev May 21, 2026
2.1.1-beta1 Pre-release May 19, 2026
2.1.x-dev Dev Oct 12, 2025
3.0.x-dev Dev Sep 18, 2025
2.1.0 Stable Sep 9, 2025