im trying to lock my admin panel from my users with adding htpsswrd file to wp-admin folder. but also i want my users can edit their profiles. so i create this file (htaccess)
AuthName "Username and password required" AuthUserFile ...../wp-admin/.htpasswd Require valid-user AuthType Basic
Order deny,allow Allow from all satisfy any
which works but, now when i try to access profiles, the site still askes password but also i can login. i think there are more files behind.
anyone know profile.php is using which files behind other than (user-edit.php)|(profile.php)|(users.php)