[DrP]

Hi,
I've successfully protected two folders (press and trade) using .htaccess and .htpasswd. The .htpasswd file contains two usernames and two passwords. Fine. However, when a user logs in to the trade folder, they automatically have access to the press folder and vice versa.
Is there any way, using this method, that I can allow access to the press folder using one username/password and access to the trade folder with another username/password?
Thanks,

[Lordandmaker]

Where are they with respect to each other?

How have you configured it? What do the relevant bits of your apache config file look like?

[DrP]

I've two folders, Press and Trade. The following .htaccess in each folder:

AuthType Basic
AuthName "restricted area"
AuthUserFile /home/graveyar/.htpasswds/.htpasswd
require valid-user

and obviously the password file. Does .htpasswd have to be called that, or can I call it something else? And I'm on shared hosting so cannot access the config file.

[Lordandmaker]

.htpasswd can be called whatever you want, so long as you specify it with AuthUserFile.
Are the two dirs sharing a .htpasswd? Do they have the same realm? They shouldn't.

Where are the dirs with respect to each other?

[SNewman]

The two .htaccess files are pointing to the same .htpasswd file which is why they are gaining access to both folders. You are in fact able to name .htpasswd files differently, so I would suggest naming one .htpasswd1 and the other .htpasswd2 (or something like that) and changing your .htaccess files appropriately.