Im back again with yet another issue.
I have created a simple .htaccess file in the root as detailed below:
The contents are as follows:
AuthName "Please Log In"
deny from all
My .htpasswd is located in /var/access/.htpassword and that has the automated lines added when you issue the htpasswd -c command in linux.
For some unknown reason to me the file is not block access to that directory and I have no idea why?
All of the sub directories are still visible too.