Securing my admin directory with .htpasswds produces a 404

[corrado444]

Hello. I usually secure the admin directory in Zen Cart using the .htpasswds system. For those that don;t know what that is, most Cpanels allow you to password an entire directory so that before you can login into your administration page you have to login in the directory first.

If I recall, this is one of the recommended security measures for Zen Cart and most other php scripts around.

However, this time I am encountering a problem. When I try to reach the admin directory on a site I just moved to a new server after securing the directory with an .htpasswds password I get a 404 in response.

I have done this repeatedly and when I asked support their answer was that Zen Cart was preventing the .htpasswds from working.

I know that ZC does not do this out of the box, as I secured numerous ZC websites with the same system, so it has to be something in this particolar installation creating this issue.

Unfortunately, I did not create the website, but I inherited it and allthough I installed several add-ons, none of the ones I installed should produce this issue.

I am wondering if someone else has encountered this and if there is a solution.

My current culprit is the SEF URL ad on the site uss and I'll try to see if I can fix it there, but in the meantime I wanted to start this discussion so in case I can sove it (on my own ior with someone's kind help) it can remain on record for others to refer to.

Thank you very much

[mprough]

Go in to cPanel and delete ALL of the directory passwords for the admin section.... Then Outside of your root in FTP look for the password folder... HTPASS, PASS, AUT something of this nature depending on the configuration.
Delete ANY passwords and users associated with your admin section, then recreate the auth in cPanel and you should be fine.

~Melanie

[corrado444]

Thanks Melanie, I'll give it a shot. For now I have decided to change the admin directory name as additional security. When I can fix this I'll add a password.

Take care