xtanda

hi jca,
not sure what bothering our mod up there, but let me assure you that adding extra password protection at wp-admin is ALWAYS a good thing.

I have encountered your problem as well with many plugin that usually related to commenting. While excluding *.css in .htaccess is not directly possible, we can do the other way around: just ask password for specified type such as *.php, *.js. (Other file type inside wp-admin are *.css, *.png and *.gif)

So, my htaccess inside wp-admin looks like below:

ErrorDocument 401 /401.html
<FilesMatch “\.(js|php)$”>
AuthType Basic
AuthUserFile /path/to/.htpasswd
AuthName “Security Login”
Order Deny,Allow
Deny from all
require valid-user
Satisfy any
</FilesMatch>

hope this helps….

Some security setting on Apache webserver produce this incompatibility.

Try to put below code on your .htaccess

<IfModule mod_security.c>
SecFilterInheritance Off
</IfModule>

So, the complete .htaccess on your server would be something like:

<IfModule mod_security.c>
SecFilterInheritance Off
</IfModule>
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress

Hope this helps