Unwanted HTTP Auth on website

[Xavier Crespin]

Hello,

I got a problem on a Cpanel hosted website, suddenly the website is password protected with a "authentication required" similar to when we enable directory privacy from the cpanel interface.
A year ago we password protected this site using the embedded directory password protection, but the protection was removed once the site was publicly launched.

In the "directory privacy" no directory is password protected, but i can see a .htpasswds at the root of the account, containing a tree of folder until our site's document root.
Each folder contains an empty passwd file.

What could i try to disable all http auth on this hosting?

In advance, thank you

 

[cPanelLauren]

HI @Xavier Crespin

Can you check if there's an .htaccess file in the document root for the domain that contains an AuthType directive similar to this:

AuthType Basic
AuthName "$user"
AuthUserFile "$/path/to/.htpasswds/passwd/file"
require valid-user

 

[Xavier Crespin]

Hey,

As it turns out, a drupal module was responsible for the password invite, once the module was disabled, the site is accessible again.

Thanks for your answer

 

[cPanelLauren]

Hi @Xavier Crespin

I'm happy to hear that you found the source of the issue! Thank you for letting us know.