.htaccess requests correct login twice with .htpasswd and wordpress

1 Views

I use .htaccess to ask for credentials to access members only data. The .htaccess file is stored in one of the directories and protects everything in directories below it. The .htaccess file itself is very simple: 

AuthName "Members Area"
AuthType Basic
AuthUserFile /home/xxxxx/public_html/xxx/data/.htpasswd

require valid-user

Problem is, when we moved to a new server (and built the new website within that directory using WordPress), the Authentication Box now comes up twice and requires users to enter the same correct login information both times.

Read More

I’ve read in other strings here about trailing /, but since I don’t have a redirect or anything else in my .htaccess, I’m not quite sure what to do.

Anybody have any suggestions on a workaround or rewrite?

Post Views: 1

Related posts

1 comment

  1. This is most likely because you’re running an https redirect (or another redirect) inside another .htaccess file. So it is asking for the authentication once in http, and once in https. If you do this:

    <If "%{HTTPS} == 'on'">
    AuthType Basic
    AuthName "Password Area"
    AuthUserFile "/yourdirectory/.htpasswd"
   <IfVersion >= 2.4>
      AuthMerging And
   </IfVersion>
    Require valid-user
</If>

    then it will only ask for the password once the redirect has happened. Otherwise, get rid of the second redirect.

Comments are closed.