Home » WordPress » Update: AskApache Password Protect Plugin

by 13 comments

Note: A lot of updates to this plugin are in the works, so this plugin should be considered BETA... than them.

Adding .htaccess based HTTP Basic Authentication to your WordPress blog is such a smart thing to do and I'm trying to help make it easier for you. Mainly because it stops alot of automated hacking attempts and exploits from ever being attempted, thus cutting down on the number of requests, connections, and mysql queries for all WordPress blogs on the Internet.

The Plugin Control Page

Upgrading Instructions
Just download and extract the new plugin file to wp-content/plugins/askapache-password-protect/ and activate it. It automatically deactivates and deletes previous versions.

New Features

Well, this is BETA for now, meaning it works but there are a lot of cool features I just didn't have time to include in this release. A lot of people were experiencing problems with the older version.

  • TONS of error checking and compatibility checks. This plugin WONT break your server.
  • Tests your servers ability to use .htaccess/.htpasswd files by setting them up in a temporary spot first and checking them. (ssl/https enabled)
  • Determines which .htpasswd Encryption Algorithms that your server supports by testing each one.
  • Provides all 4 htpasswd encryption formats that Apache explains
  • Uses php to generate the encrypted hashes for all 4 encryption formats using portable code. Even has the apache-specific MD5!
  • Allows you to specify and change the AuthName / Realm
  • I made this upgrade fool-proof, just the way I like it.

Easy Upgrade and Installation

Download New AskApache PassPro

Now hosted by

Current AskApache Password Protection: download | description

Whats Looks Like

The Plugin Control Page

WordPress Security Plugin: Various Option Panels on Plugin Setup Page

The HTTP Basic Authentication Password Prompt

Easy Upgrade and Installation

Install Problems
Known solutions to all the issues are in the works so prepare for the next release. In the meantime, the problem occurs because this version tries to save the encrypted htpasswd file ABOVE your document_root, obviously this isn't working very well for most wordpress users.


Comments Welcome

Information is freedom. Freedom is non-negotiable. So please feel free to modify, copy, republish, sell, or use anything on this site in any way at any time ;)

My Online Tools

Popular Articles
Hacking and Hackers

The use of "hacker" to mean "security breaker" is a confusion on the part of the mass media. We hackers refuse to recognize that meaning, and continue using the word to mean someone who loves to program, someone who enjoys playful cleverness, or the combination of the two.
-- Richard M. Stallman

It's very simple - you read the protocol and write the code. -Bill Joy


Except where otherwise noted, content on this site is licensed under a Creative Commons Attribution 3.0 License, just credit with a link.
This site is not supported or endorsed by The Apache Software Foundation (ASF). All software and documentation produced by The ASF is licensed. "Apache" is a trademark of The ASF. NCSA HTTPd.
UNIX ® is a registered Trademark of The Open Group. POSIX ® is a registered Trademark of The IEEE.

+Askapache | |

Site Map | Contact Webmaster | License and Disclaimer | Terms of Service | @Htaccess

↑ TOPMain