Why is my .htaccess and .htpasswd not working?

Question

I have .htaccess and .htpasswd files in the directory that has png files that I want to protect.

.htaccess

  AuthType Basic
  AuthName "Co to za nielegalne grzebanie w plikach, juz dzwonie na milicje."
  AuthUserFile ./.htpasswd
  Require valid-user

.htpasswd

test:$apr1$hp25fckm$QSSnnAWn6b5lWDScZ7h7t0

and I don't know why it's not working?

Where is the `.htpasswd` file? – Esa Jokinen Mar 10 '21 at 20:24 — Esa Jokinen, Mar 10 '21 at 20:24
Are you really on Apache 2.2? – MrWhite Mar 10 '21 at 20:53 — MrWhite, Mar 10 '21 at 20:53

MrWhite · Answer 1 · 2021-07-07T15:23:58.670

AuthUserFile ./.htpasswd

The file-path to your password file is most certainly wrong. This should be an absolute filesystem path. (Or a relative path, relative to the ServerRoot).

For example, depending on the file-path to your document root, this should be something like the following instead:

AuthUserFile /www/user/public_html/images/.htpasswd

However, the .htpasswd file should be at a location outside of the DocumentRoot (outside of the public HTML space). It shouldn't be in the directory you are trying to protect.

Reference:

https://httpd.apache.org/docs/2.2/mod/mod_authn_file.html#authuserfile

Why is my .htaccess and .htpasswd not working?

1 Answers1

Linked