We recently blocked all IP addresses except mine and the company owner's from getting to /wp-login.php except today we discovered this has inadvertently blocked any other password protected page. By password protected I mean using the WP built in password as seen in this screenshot:
This is the segment of HTACCESS that we added which did stop people WP-Login but has also stopped people from using the Password Protected
# Block access to wp-login.php. <Files wp-login.php> order deny,allow allow from 192...(ip) allow from 192...(ip) deny from all
Would there be an easy work around so we can block /wp-login.php without blocking other password protected pages?