.htaccess

[mechanical messiah]

everything is in /var/www, and the folder i'm trying to password protect is /var/www/programs.

i have .htaccess in the programs folder containing the following:

AuthType Basic
AuthName "Programs"
AuthUserFile /var/www/.allowlist
Require valid-user

...and i have .allowlist in the www folder containing the following:

username:passwd

...and i used the following command (while in the www folder) to create the .allowlist file:

htpasswd -c .allowlist username

yet nothing is happening! can anyone help me?

[mechanical messiah]

actually i messed that up... the file i'm trying to protect is /var/www/html/programs :)

[mechanical messiah]

ah it was the AllowOverride settings... they're on ALL now... any danger in this?