This question already has an answer here:

I have a CiviContribute page which was intended to only be accessed by people renewing a specific type of membership.

We have found though, that it appears on a Google search and indeed a completely random person has signed up for the membership.

I have a Drupal Role for this membership type and also have a Group which we use as a mailing list; so would it be better to build it into a webform controlled by Access Control?

marked as duplicate by Laryn - CEDC.org, choster, William Mortada, Jon G - Megaphone Tech, Joe Murray Nov 7 '17 at 22:30

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • Webform might work but you would need to confirm if your Payment Processor is the type that works with webform-civi – petednz - fuzion Mar 6 '16 at 19:24
  • I had that as a plan B as we already use that for an organisational relationship. I am surprised there is no option for a wholly renewal only option. – Darren Whittenham-Gray Mar 7 '16 at 17:04
  • You might find this useful civicrm.stackexchange.com/a/4677/872 – Andrei Jun 7 '16 at 23:57

Idea for a possible workaround:

  • Create a group and role for the non-eligible users
  • Set up a Drupal block that only shows on this page and only for this role
  • put no visible content in the block, but create some JavaScript functionality to prevent non-eligible users to access the form

Not the answer you're looking for? Browse other questions tagged or ask your own question.