htaccess password protection

Your complete toolkit to password protect a development environment (or any website for that matter) via .htaccess

1. Upload path.php to your webspace
2. Open yourdomain.com/path.php
3. Copy the server path from the open browser window to .htaccess
4. DELETE path.php from your webspace!!!
5. Either use the .htpasswd we provide in this git or create your own - on a Mac, you can use the command echo "test:$(openssl passwd -apr1)" >> .htpasswd in your terminal app to generate a .htpasswd file with your own password (this will be saved to your user folder and you can NOT see this file in your Finder app unless you changed the settings).
6. Upload .htpasswd to the root of your website
7. Download the .htaccess of your website (this is important so your WordPress permalink settings do not get lost; if you are not using WordPress, skip this step).
8. Add the contents of the .htaccess in this repo to your .htaccess (I'd recommend at the very beginning)
9. Paste the server path to .htpasswd in your new .htaccess
10. Upload changed .htaccess

=> To access your protected website (if you didn't change the credentials), enter the username "test" and the password "t3stpwd".

---

Additional info: If you prefer to have ONLY wp-login.php under password protection, remove the "#" before the <FilesMatch> commands in the .htaccess. WARNING: DO NOT keep a password protection if users can register on your site and / or they can do stuff that requires AJAX (e.g. online shops with WooCommerce or most contact form plugins).

---

If you would like to use different login credentials and the terminal command is not working for you, I'd recommend for you to use a .htaccess generator, e.g. https://www.web2generators.com/apache-tools/htpasswd-generator