Title: .htaccess Site Access Control
Author: Miina Sikk
Published: <strong>29. Januara 2016.</strong>
Last modified: 11. Maja 2016.

---

Pretražite dodatke

Ovaj dodatak **nije testiran s najnovija 3 glavna izdanja WordPress-a**. Možda se
više ne održava ili se ne podržava i može imati problema sa kompatibilnošću kada
se koristi sa novijim verzijama WordPress-a.

![](https://s.w.org/plugins/geopattern-icon/htaccess-site-access-control.svg)

# .htaccess Site Access Control

 Od [Miina Sikk](https://profiles.wordpress.org/miinasikk/)

[Skini](https://downloads.wordpress.org/plugin/htaccess-site-access-control.zip)

 * [Detalji](https://bs.wordpress.org/plugins/htaccess-site-access-control/#description)
 * [Recenzije](https://bs.wordpress.org/plugins/htaccess-site-access-control/#reviews)
 *  [Instalacija](https://bs.wordpress.org/plugins/htaccess-site-access-control/#installation)
 * [Razvoj](https://bs.wordpress.org/plugins/htaccess-site-access-control/#developers)

 [Podrška](https://wordpress.org/support/plugin/htaccess-site-access-control/)

## Opis

Using the password protection will give you extra security layer of protection from
brute force hacking attacks. Additionally, it's also an easy way to password protect
your entire site, without needing to create separate WordPress users for each visitor.

When you enable the password protection, the user won't be able to see anything –
not even see the protected page – until he/she inserts the username/password. You
can password protect the whole website, including the administrator pages; you can
password protect the administrator pages; or you can password protect the WordPress
login page.

Free plugin options include:

 * Enabling/disabling the password protection to wp-login.php, WordPress admin pages.
   Note that you’ll be asked to re-type the .htaccess username/password you created
   before enabling any of the settings – to ensure that you wouldn’t enable the 
   password protection without even knowing the password yourself!
 * Modifying the existing users: you can change any .htaccess user’s password and
   remove the users.
 * Adding one .htaccess user.

Premium plugin options:

 * Create/modify an unlimited number of .htaccess users;
 * Protect your whole site, making it accessible to only those who have the .htaccess
   user.

If you have any other suggestions, please let us know! You can contact us via http://
www.wpsos.io/wordpress-plugin-htaccess-site-access-control/

For more information and support, check out: http://www.wpsos.io/wordpress-plugin-
htaccess-site-access-control/

## Slike ekrana

 * [[
 * Screenshot of the main configuration screen
 * [[
 * Screenshot of the enabling/disabling password protection configuration
 * [[
 * Modifying existing users
 * [[
 * Adding a new user
 * [[
 * A password protected wp-login.php page

## Instalacija

The installation and use is very straightforward. You should:

 1. Upload the folder `htaccess-site-access-control` to the `/wp-content/plugins/` 
    directory
 2. Aktivirajte plugin koristeći WordPressov meni ‘Plugini’
 3. From the ‘Settings’ menu, there will be a new option, called ‘.htaccess Site Access
    Control’

## ČPP

  Which options do you modify?

As of version 1.0, you can choose between the following options:
 1. Enabling/disabling
the password protection to wp-login.php, WordPress admin pages, and/or the whole
site. Note that you'll be asked to re-type the .htaccess username/password you created
before enabling any of the settings – to ensure that you wouldn't enable the password
protection without even knowing the password yourself! 2. Modifying the existing
users: you can change any .htaccess user's password and remove the users. 3. Adding
a new .htaccess user.

Note that you have to have at least one user to be able to enable any of the options:
otherwise you would be locked out!

For more information and support, check out: http://www.wpsos.io/wordpress-plugin-
htaccess-site-access-control/

  The plugin is giving a warning that some of the files need to be writable for 
it to work, what does this mean?

Since the plugin is protecting your site via modifying .htaccess and .htpasswd files,
it works only if these files are writable by WordPress. If the files don't exist,
you can just create empty writable files to the location brought out in the plugin's
warning. You can also see from there which files are already writable and which 
not.

  I forgot my password, and got locked out from the site! What can I do?

For accessing your site again, you have to modify two files:
 1. .htaccess file 
in your WordPress root directory (the directory where the file wp-config.php is 
located); 2. .htaccess file in your WordPress wp-admin folder

From both files, delete everything BETWEEN these two lines:

 * # BEGIN WPSOS htaccess plugin
 * # END WPSOS htaccess plugin

IMPORTANT: Before modifying either of the files, make a copy of them!

For accessing the files, either use FTP or log in to your web hosting service provider,
usually they also enable direct file modification.

  Where can I get some support?

Check out our site, at: http://www.wpsos.io/wordpress-plugin-htaccess-site-access-
control/

  I have some suggestions for other options I want edited

Let us know, via: http://www.wpsos.io/wordpress-plugin-htaccess-site-access-control/

## Recenzije

![](https://secure.gravatar.com/avatar/1b02697f1c0632758437ac2d7ce62b3f58845248f2520857403f8f10d1b918ee?
s=60&d=retro&r=g)

### 󠀁[Useful but in need of improvement](https://wordpress.org/support/topic/useful-but-in-need-of-improvement/)󠁿

 [pcgardner](https://profiles.wordpress.org/pcgardner/) 9. Novembra 2016.

The purpose of this plugin is to create additional password protection for the wp-
login page, or the wp-admin folder, or even your entire site. It does this by the
standard method of adding code to the .htaccess file that gets an additional username
and password from a .htpasswd file (in which the MD5 hash of the password is used
rather than the password itself). So far so good: it works, but it could be better–
hence four stars. When you open the plugin's settings page, it asks you to enter
a new user. At first I thought I had to enter my WordPress username, but in fact
it wants the new username that you want to use for the additional login box. I realised
that when I thought about it, but it should be made clearer. More seriously, it 
puts the .htpasswd file in the same directory as the .htaccess file that it has 
modified. That is within the webroot, and so is accessible via http – although the
plugin author has attempted to mitigate this by adding some more code to .htaccess
preventing Apache from serving .ht* files. Much better is to put the .htpasswd file
into the private folder, which is outside the webroot. I did that manually by moving
the file and altering the location in .htaccess, both of which can be done using
FTP, but it's not convenient. Conclusion: using the plugin is quicker than doing
the whole thing manually. It would be quicker still if the settings page allowed
you to choose where .htpasswd should be placed. The main advantage of the plugin
is that it creates the .htpasswd file automatically; otherwise you would need console
access to the server in order to run a script to create the file, or the ability
to calculate the MD5 hash of the password if you want to create the file in a text
editor.

![](https://secure.gravatar.com/avatar/78c46a00951db59001ef113247e968a07895b067d87141fd8182ade01722d200?
s=60&d=retro&r=g)

### 󠀁[Bravo](https://wordpress.org/support/topic/bravo-51/)󠁿

 [bill57](https://profiles.wordpress.org/bill57/) 3. Septembra 2016.

Ce plugin fait sont travail, protéger l'admin, créer des htaccess et htpasswd et
en plus ça fonctionne

![](https://secure.gravatar.com/avatar/afdf43aeeece9a03648ab1164d196f494e19f88568477fb1fb8513eb15abb437?
s=60&d=retro&r=g)

### 󠀁[Work but with some annoying bug](https://wordpress.org/support/topic/work-but-with-some-annoying-bug/)󠁿

 [hendsiyas](https://profiles.wordpress.org/hendsiyas/) 3. Septembra 2016.

I try to manually set password on the wp-admin page but did not work, this plugins
work, but with some bugs. First GUI bug, if I disable some option, it ask for password
even when the user and password form not showed. And 2nd bug is with woocommerce.
If I enable Protection for wp-login, when buyer logoff their account, this plugin
ask for password. The only solution is disabled wp-login protection and only enable
it on wp-admin page. Not perfect but this plugins work. Hope you fix the bug and
get more download.

 [ Read all 3 reviews ](https://wordpress.org/support/plugin/htaccess-site-access-control/reviews/)

## Saradnici i programeri

“.htaccess Site Access Control” is open source software. The following people have
contributed to this plugin.

Doprinositelji

 *   [ Miina Sikk ](https://profiles.wordpress.org/miinasikk/)
 *   [ citywanderer ](https://profiles.wordpress.org/citywanderer/)
 *   [ Miina Sikk ](https://profiles.wordpress.org/stubgo/)

[Prevedi “.htaccess Site Access Control” na vaš jezik.](https://translate.wordpress.org/projects/wp-plugins/htaccess-site-access-control)

### Zainteresirani za razvoj?

[Pregledajte kôd](https://plugins.trac.wordpress.org/browser/htaccess-site-access-control/),
pogledajte [SVN spremište](https://plugins.svn.wordpress.org/htaccess-site-access-control/)
ili se pretplatite na [dnevnik razvoja](https://plugins.trac.wordpress.org/log/htaccess-site-access-control/)
od [RSS](https://plugins.trac.wordpress.org/log/htaccess-site-access-control/?limit=100&mode=stop_on_copy&format=rss).

## Zapis promijena

#### 1.0

 * Initial version.

## Meta

 *  Version **1.0**
 *  Last updated **prije 10 godina**
 *  Active installations **800+**
 *  WordPress version ** 3.0.1 ili viša **
 *  Tested up to **4.4.34**
 *  Language
 * [English (US)](https://wordpress.org/plugins/htaccess-site-access-control/)
 * Tags
 * [htaccess](https://bs.wordpress.org/plugins/tags/htaccess/)[htpasswd](https://bs.wordpress.org/plugins/tags/htpasswd/)
   [security](https://bs.wordpress.org/plugins/tags/security/)[WPSOS](https://bs.wordpress.org/plugins/tags/wpsos/)
 *  [Napredni pogled](https://bs.wordpress.org/plugins/htaccess-site-access-control/advanced/)

## Ocjene

 4 out of 5 stars.

 *  [  1 5-star review     ](https://wordpress.org/support/plugin/htaccess-site-access-control/reviews/?filter=5)
 *  [  1 4-star review     ](https://wordpress.org/support/plugin/htaccess-site-access-control/reviews/?filter=4)
 *  [  1 3-star review     ](https://wordpress.org/support/plugin/htaccess-site-access-control/reviews/?filter=3)
 *  [  0 2-star reviews     ](https://wordpress.org/support/plugin/htaccess-site-access-control/reviews/?filter=2)
 *  [  0 1-star reviews     ](https://wordpress.org/support/plugin/htaccess-site-access-control/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/htaccess-site-access-control/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/htaccess-site-access-control/reviews/)

## Doprinositelji

 *   [ Miina Sikk ](https://profiles.wordpress.org/miinasikk/)
 *   [ citywanderer ](https://profiles.wordpress.org/citywanderer/)
 *   [ Miina Sikk ](https://profiles.wordpress.org/stubgo/)

## Podrška

Imate nešto za reći? Trebate pomoć?

 [Pogledaj forum podrške](https://wordpress.org/support/plugin/htaccess-site-access-control/)

## Pokloni

Da li bi ste željeli da podržite napredovanje ovog proširenja?

 [ Pokloni ovom proširenju ](http://www.wpsos.io/wordpress-plugin-htaccess-site-access-control/)