Blocking wp-login in HTACCESS has also blocked password protected pages

Unfortunately a Password Protected post uses the wp-login.php file to process the password authentication for a post. So your Apache snippet of blocking all but those specific IPs is going to apply to anything that is password protected as well.

You can get nerdy and read code. In here you can see that Post Password form’s action is set to run that data through wp-login.php?action=postpass

So that is the bad news, BUT:

I wonder if trying to open that up so that your other files in WP can access those files? (I am just purely guessing at this point)

# Block access to wp-login.php.
<Files wp-login.php>
order deny,allow
allow from 192...(ip)
allow from 192...(ip)
allow from localhost
allow from 127.0.0.1
deny from all

I hope that helps or gives you some insight!

Related Posts:

  1. Improve wordpress security by hiding non public resources
  2. Does this .htaccess security setting really work?
  3. File and directory permissions
  4. Using “wordpress_logged_in” to restrict direct access to uploads folder in 2021
  5. WordPress URL/Folder ReWrite using Htaccess
  6. Which WordPress scripts need to be executable for a fresh installation?
  7. Blocking access to wp-login via htaccess not working
  8. Attach to wp-login.php and xmlrpc.php
  9. XMLRPC filtering through htaccess not working
  10. Restricting user login by IP address
  11. .htaccess password protect all but one page
  12. WordPress: Adding Security
  13. How do I test to ensure that my wp-config file is protected?
  14. WordPress not seeing .htaccess rules
  15. Rules in .htaccess only if the requested URL is /wp-admin
  16. Disable directory browsing of uploads folder
  17. Strange behaviour of is_user_logged_in() and get_current_user_id()
  18. Selectively Disabling PHP via .htaccess in Root Directory
  19. Should I prevent access to .htaccess and wp-config.php files?
  20. Basic Auth .htaccess on wp-login, but allow logout from woocommerce
  21. Using htaccess to prevent spam through wp-comments-post.php
  22. How can I create a private site that is inaccessible from the outside?
  23. Restrict Content for only Contributors via .htaccess
  24. Allowing access to certain WordPress created pages or posts with htaccess / htpasswd
  25. My WP site and password was hacked, what to do? [closed]
  26. Why is this line of code Wrong in every WordPress .Htaccess security article?
  27. Protecting direct access to PDF and ZIP unless user logged in (without plugin)
  28. WordPress + Magento .htaccess ReWriteRule Issue (www vs. non-www)
  29. Admin-Ajax.php, SSL, Non-SSL
  30. How to Block Access to Standard Login Flow and Comment Flow
  31. WordPress site displaying 404 for any page apart from index
  32. How to avoid wordpress permalink rules to inherit in a sub-folder
  33. Cant block wordpress readme files
  34. WordPress keeps deleting .htaccess file
  35. Prevent users from browsing through the media galleries
  36. How to modify the .htaccess to force ssl on login and admin pages
  37. .htaccess redirects no longer work
  38. Exclude subfolder from WP-redirect works with html but not php files
  39. Server crashed trying to restore wordpress multisite, images are not found pls help
  40. Create subdomain masking for each user in WordPress
  41. Redirect from different port to subdomain – htaccess
  42. WordPress Redirect 301 register page
  43. Password protect a specific category page/post
  44. Preventing BFA in WordPress without using a plugin
  45. Only expose routes with prefix /wp-json on WordPress using Apache
  46. Hardening wordpress: blocking /includes with htaccess
  47. Install a Network under a mapped domain
  48. htaccess – RewriteRule without redirect not working
  49. Restrict uploaded files into a custom folder to logged in users by htaccess: looking for Nginx – not only Apache – solution
  50. Modify the .htaccess file
  51. blocking access to all post/tag URIs via htaccess
  52. sitemap contains weird links and does not contain my pages [closed]
  53. want to rewrite an URL in wordpress
  54. Giving to wordpress it’s own directory cause login loop
  55. how to redirect 301 my old search query string to wordpress search query string?
  56. How to block access to files without modifying .htaccess or ngnix config? [closed]
  57. Allow REST API over HTTP, the rest of the site forced to HTTPS
  58. Force to use STRONG users password and implement rule to prevent REUSE [closed]
  59. Conflict with Force SSL and Rewrite Rules
  60. create virtual subdomains for a bunch of urls on a site via .htaccess
  61. WordPress site blacklisted by Google about .htaccess [closed]
  62. How to rewrite 404 to home page using htaccess?
  63. How can I force a specific password?
  64. “Oops.” error on an html file directly uploaded to a subdirectory of my WordPress site
  65. How do I reset a rewrite?
  66. VServer/Rootserver/Shared Hosting: Multiple WordPress installations each having their unique domain?
  67. WP Codex answer incomplete? Put WP in subdirectory. .htaccess change required
  68. WordPress is removing trailing slash
  69. Sub domain URL slash / missing after domain and before Post & page slug
  70. Problem with WordPress permalinks
  71. Htaccess file reset automatically how to fix this issue
  72. Clone WordPress for testing on localhost (with Fiddler)
  73. Is it okay to use an ACF field to store a password for a protected area of a page?
  74. Redirect wordpress site to www from non www on wordpress server
  75. Update htaccess in several WP sites at once
  76. Pretty Url not working on the server
  77. How to use slug with subdomain?
  78. Reversing domain ‘sharding’ with htaccess
  79. Change wp-login.php? Problem with .htaccess password protection and multi user shop
  80. WordPress Intercepting Requests To A File In Public HTML
  81. Htaccess remove dates from root site but not from subdomain
  82. .htaccess home configuration
  83. Installing wordpress on subdirectory 2 levels down
  84. Cannot Override WordPress 404 for a Sub-Directory
  85. adding a rewrite rule in wordpress functions file
  86. Multisite permalinks for subfolder wordpress installation
  87. Missing visual editor after placing a redirect rule into the .htaccess file
  88. Redirect not working
  89. Permanently Redirect WordPress Subfolder Blog to Subdomain on Another Server
  90. WordPress site not redirecting properly
  91. Could a user account with a stolen password compromised entire WP site?
  92. .htaccess for Subdomain and Subfolder w/SSL
  93. Why my wp site always redirecting to the old website path..?
  94. Hiding wp-config.php via .htaccess on an install installed in another directory?
  95. WordPress redirection
  96. Home page returns 404
  97. Browser Caching .htaccess
  98. Are there any negative impact if access to directories were accidently denied?
  99. Interaction of .htaccess, WP_HOME, and WP_SITEURL
  100. malware affecting backend of wordpress website-could be .htaccess file