On the Internets you will find many posts that explain how to use a password protection on your back-end using a auth password.
There is a problem
But there is one big problem with that is it will break all your
In the WordPress Codex you will find a page that will explains how to implement AJAX. You’ll read that
admin-ajax.php lives in
Using a password protection for this directory, you’re blocking access to that file which means that all AJAX requests will be broken.
There is a solution
You can correctly do this, but there is only one good way:
Doing that, you’ll block your
/wp-admin folder but NOT for the
ajax/post and content files like
jpg/css/js. This, is the way to do it.
You can use htaccesstools.com to generate you
.htpasswd file then copy it in your server like in the example:
Now, remember, that password protection is NOT the only way to protect your content and files. Our SecuPress plugin will easily help you to do that without having to touch any line of code.