[danwithtnlwy]

I have set up the protected download folder, but it’s not working as expected. The first time I click on a url that leads to a file in the /wp-content/uploads/emember/downloads/ folder, the system’s username/password dialog is presented. After I type in the credentials of a valid eMember user, the file is downloaded. At this point I am not/have not logged in to eMember. Then, when I click on another link to a file in the /wp-content/uploads/emember/downloads/ folder, the file is downloaded without the username/password prompt being displayed – and, again, I’m not even logged in to eMember. The .htaccess file that is in the emember/downloads folder has this in it:

AuthUserFile /my_path_to/wp-content/uploads/emember/downloads/.htpasswd

AuthName “eMember Protected Folder”

AuthType Basic

require valid-user

So I know that I have the folder protection capability set up correctly. Also, the .htpasswd file has my user along with an encrypted version of the password. According to your documentation the user should be prompted every time they try to download a file, but that is not what I’m seeing. Also, when a user account expires, do you also delete their corresponding username from the .htpasswd file so that they can’t get to the content?

[Author]

Posts