As for the password protection, if you're getting issues, can you paste the resulting .htaccess file you've got? I tested adding password protection on our build system, but didn't have any issues.
I have tested more, and the trouble with .htaccess and password protection is only visible when using WordPress with permalinks. Here is a description:
1: The domain use WordPress with permalinks set to this:
http://domain.com/2010/11/sample-post/ and then have the following .htaccess at this path: /home/username/domains/domain.com/public_html/.htaccess:
Code:
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress
2: Using DirectAdmin file manager I browse to this path:
https://hostname.com:2222/CMD_FILE_MANAGER/domains/domain.com/awstats and then I pasword protect it.
3: Then trying to browse to domain.com/awstats give a 404 not found error
4: If I remove the following WordPress code from .htaccess at /home/username/domains/domain.com/public_html/.htaccess, then the domain.com/awstats work again:
Code:
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress
5: So when setting password protection on domain.com/awstats using the file manager, it result in a .htaccess file in awstats directory to look like this:
Code:
Options -Indexes +ExecCGI
AddHandler cgi-script .pl
DirectoryIndex awstats.pl
RewriteEngine On
RewriteCond %{HTTP_HOST} ^www.domain.com$ [NC]
RewriteRule ^(.*)$ http://domain.com/awstats/$1 [R=301,L]
AuthGroupFile /dev/null
AuthName "passord"
AuthType Basic
AuthUserFile /home/username/domains/doman.com/.htpasswd/awstats/.htpasswd
require valid-user
And it is this that is not compatible when using Wordpress with nice looking permalinks. This must be changed to be compatible with users running WordPress sites installed at public_html - also when testing, please be aware that the browser will cache the awstats statistic page. If you visit it when it works, then test and change so it should not work, it will look like it works because it is cached. You must then after doing changes restart the browser to see if there is problems or not with domain.com/awstats
Just to make sure you don't misunderstand me: What we need is for the password protection of "awstats" folder, or the placement of the default .htaccess file in "awstats" folder, to be in such a way that it will still work when people have the following WordPress .htaccess file in public_html:
Code:
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress