James Wilson

To close this thread, i will copy what Otto42 responded to my other thread with a solution:

The problem with using subdirectories with authentication is a known issue. A workaround is to create an empty file somewhere called “onerror.html” and then to add these lines to the main .htaccess, before the WordPress rules:

ErrorDocument 401 /path/to/onerror.html
ErrorDocument 403 /path/to/onerror.html

Change the path as appropriate for your setup, of course.

@otto: “After doing this, you’ll want to change your .htaccess file to be read only (chmod 444) so WordPress won’t try to overwrite your changes.”

wordpress will reach into my root dir to change the .htaccess even though it sits in a subdir?

in case you need it for reference, my complete .htaccess file looks like this:

`
Options +FollowSymLinks

# BEGIN FAlbum
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule ^photos/?([^/]*)?/?([^/]*)?/?([^/]*)?/?([^/]*)?/?([^/]*)?/?([^/]*)?/?([^/]*)?/?([^/]*)?/?$ /wp/wp-content/plugins/falbum/wp/album.php?$1=$2&$3=$4&$5=$6&$7=$8 [QSA,L]
</IfModule>
# END FAlbum

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /wp/
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
#</IfModule>

# END WordPress
`