.htaccess不能保护文件夹中的文件

Question

I have an simple .htaccess and a .passwd file for a password protection of an folder under apache2: /var/www/test

Works fine if i want to connect to example.com/test. But in the test folder is also a download.exe. If i connect to example.com/test/download.exe i can download the file without being asked for a username and a password.

How can i change that? The .htaccess file:

AuthType Basic
AuthName "protected area"
AuthUserFile /var/www/test/.passwd
Require valid-user

Answer 1

Try a different browser or a different computer to access example.com/test/download.exe before accessing example.com/test. Browsers you are using can have cached the downloaded file or the credentials used.