-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Schneelocke wrote: I found this and followed the instructions: http://www.walkingpaper.org/362 I added a .htaccess file too, just in case. The reason I didn't want to use a .htaccess solution in the first place was because the password I intended to use was quite short and it seems as if apache does not "take a timeout" after a few failed attempts. That would make it possible to bruteforce my password quite quickly since I can download at 1 MiBps. I increased the password length to > 20 chars as a workaround. - -- Regards, Thomas Anderson "Quidquid latine dictum sit, altum sonatur" OpenPGP fingerprint: ED7E 1E98 225A 3FCC 458C B3D7 D625 20E6 F316 BD21 OpenPGP public key: http://todu.dyndns.org/pubkey.txt