Issue Password protection of / doesn't work since 18.0.59 when there is php

[Linulex]

Server operating system version

Almalinux 8.9

Plesk version and microupdate number

Version 18.0.59

Using the built-in password-protected directories feature in Plesk

When an index.php exists the password protection of "/" gives errors 403.

when only index.html only exists, it works fine.

when password protection existed before the upgrade it kept working.

Did not test with other .php files

regards
Jan

 

[Linulex]

I see it is the same problem as in

Resolved - Protected directory not working for php files

Hi, when i create a protected directory in Plesk and try to open a html file inside that directory i need to login, but when i try to open an php file it will show that file without login in. It seems like a bug!!

talk.plesk.com

and it already has a bug number ID PPPM-14334

is there a place where i can follow the bug id's? This is a severe bug for us because websites that are still in development always get password protected.

regards
Jan

 

[Peter Debik]

The fix is being worked on. It will be mentioned in the Changelog Change Log for Plesk Obsidian

 

[Linulex]

thank you

 

[fliix]

Is there any timeline for the fix or a workaround? We have more then 20 customers where PHP broke, all protected with Plesk's Protected directory.

 

[Peter Debik]

There is no ETA, but the issue is definitely being worked on and it has a high priority. By experience from the past, such things are normally handled within days and published in a hotfix or the nearest minor update.

 

[fliix]

Workaround for us was just to disable the feature in Plesk and manually creating .htpasswd with entry in the .htaccess. Works without any issue for us.