Password protect website?

[thewoody]

I have a website just for family and friends and I have been trying to password protect it without much success.

I created a user in User snd Groups then in Access Control I allowed the user to the virtual path of / which is the host root. When tested I was asked for the login/password which worked but didn't work the second time. Also another page that the index linked too wouldn't come up.

I than just password protected the index page, but as I suspected that can be circimvented. If you know one of the other page names you can just go to that directly in the URL by-passing the index.

The reason I am doing this becasue is that in the log I see IP's trying to access files that do not exist. This has me concerned.

Anyone have any suggestions?
Thanks.

[TRUSTAbyss]

Check the anti-hacking settings under Server Configuration from the console and set the Bad Requests count to a higher value. You're being blocked by the server because of missing files or bad paths.