.htaccess to require passwords, block IPs, and require HTTPS
Thanks in advance for any help you can offer!
require a password
AuthUserFile /blah/blah/blah/.htpasswd
AuthGroupFile /dev/null
AuthName Locked_Down
AuthType Basic
order deny,allow
allow from office network:
allow from x.y.z
allow from my home office IP:
allow from a.b.c.d
deny from everyone else:
deny from all
force HTTPS
this worked in tests in isolation, but not here:
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule .* https://%{SERVERNAME}%{REQUESTURI} [R,L]
RewriteEngine Off