auth basic no prompt, causing infinite loading of pages

[par_sebastien]

Hi,

I've tried setting up authentication to limit attacks to wp-login.php for WordPress sites.

When I do, there is no prompt and the pages/directories keep loading infinitely.

These are the directives I put in /home/.htaccess:

ErrorDocument 401 "Unauthorized Access"
ErrorDocument 403 "Forbidden"

<FilesMatch "^(wp-login|xmlrpc)\.php$">
AuthName "Restricted"
AuthType Basic
AuthBasicProvider file
AuthUserFile /home/.htpasswd
require valid-user
</FilesMatch>

I've also tried using the Directory Privacy tool with the same result.

 

[nixuser]

What does the apache error log say?

Try adding this line to the htaccess, after the ErrorDocument lines.

RewriteEngine off

 

[par_sebastien]

Try adding this line to the htaccess, after the ErrorDocument lines.

RewriteEngine off

Hmmm.... This did work. Maybe some rewrite rule was overriding the authentication process somehow?

 

[nixuser]

Hmmm.... This did work. Maybe some rewrite rule was overriding the authentication process somehow?

The problem is that accessing protected content makes Apache send a 401 header. I encountered this problem in a software install a while back and turning off mod_rewrite after the errordocument lines did the trick for me. More details can be found if you search wordpress forums.

 

[cPanelLauren]

Thanks @nixuser and @par_sebastien let us know if those suggestions help