Internal server error 500 when using .htaccess file for auth

[hi_victim]

Error Message

internal server error 500

Other Information

I was using .htaccess file to require a password for my site:

AuthType Basic
AuthName "A password is required to visit this site."
AuthUserFile .htpasswd
Require valid-user

I am storing .htaccess and .htpasswd in the same directory (htdocs)
I get 500 internal server error.
if you want any more information, just ask.

[Greenreader9]

1. Fill out the template next time
2. Please provide your URL
3. Are you using the “Directory Privacy” feature in the control panel?
4. You may want to turn on display errors under “Alter PHP config” in the control panel

[hi_victim]

where will i see the errors? When i asked chatgpt (never a good idea), it said to create a ‘logs’ directory, then put an ‘error_log’ file in and put ‘php_flag display_errors on’ in. it said if everything i tried didn’t work, i could get help from someone else.

[Greenreader9]

@hi_victim

where will i see the errors?

After you follow my instructions, they will appear on the page itself when loaded in the browser.

@Greenreader9

turn on display errors under “Alter PHP config” in the control panel

[hi_victim]

you mean in the page where i turned the errors on?
or the page where it says ‘internal error 500’?

[Greenreader9]

After you turn in errors in the control panel, the errors will appear on your website.

[hi_victim]

but this is my webpage

[SpookyKipper]

just turn on display errors

[hi_victim]

when i inspect element and go into the console, i see this

is this an error with my page or theirs?

[KangJL]

You need to read this

Redirected to InfinityFree 500 error page

While working on your website, you may be redirected to the InfinityFree 500 error page. This article explains why this typically happens and what you can do to fix this. Bad .htaccess rules The most common reason why you may be redirected to this page is because of an error in your .htaccess file. .htaccess rules are quite sensitive to errors. And when they break, servers are not very clear about what the issue is. The first thing to try is to rename the .htaccess file to something else (e.g…

[hi_victim]

I read that but i already know what teh problem is; it’s in this:

AuthType Basic
AuthName "A password is required to visit this site."
AuthUserFile .htpasswd
Require valid-user

[Greenreader9]

So if you remove that, it works fine?

[hi_victim]

yes. thefirst time i put it in, it worked. then, i changed it slightly and it failed. i did a few more changes, then, i dei=cided to undo the changes and i accedentally undid too many, then pressed cmd + a and apparently pycharm decided that was a change so i couldnt redo. if theres a way to get version history in pycharm, please tell me. Also, what i posted there is all of the text in the .htaccess file.

[hi_victim]

I also get this warning:

DevTools failed to load source map: Could not load content for chrome-extension://[insert random letters]/browser-polyfill.js.map: System error: net::ERR_FILE_NOT_FOUND

What does that mean? I don’t have any chrome extentions active right now.

[hi_victim]

Error Message:

This site can't provide a secure connection

The site sent an invalid response

Other Information:

I was using

RewriteEngine On
RewriteCond %{HTTP:X-Forwarded-Proto} !https
RewriteCond %{HTTPS} off
RewriteCond %{HTTP:CF-Visitor} !{"scheme":"https"}
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

to redirect traffic to https, and i got the same error when I manually typed https://mysite.example.com

I have the ZeroSSL certificate installed:

[Admin]

A redirect to a 500 page means your .htaccess code is invalid. Unfortunately, there isn’t any kind of debug logging with .htaccess rules, so your best bet is to selectively comment out lines to figure out what breaks.

Also, password protection is notoriously difficult to set up in my experience. So I strongly suggest to use the Protected Directories tool in the client area to setup password protection instead of fiddling with it yourself.

---

As for the SSL error, please note that the SSL certificate status says “Issued”, not “Installed”. Just because the certificate exists doesn’t mean it’s being used on your site. If you click the certificate in the client area, it will tell you which certificate is being used on your site right now, and provides a one-click install button to install that ZeroSSL certificate.

If you want anyone to check if your certificate was actually installed, and what specifically you can do, please share the domain name.

[hi_victim]

I clicked install at least 5 times - why is it not working?

[hi_victim]

When I created my website, it didn’t come with a .htaccess file. This is I believe because I’d already created one before. Do I need any code at the start and end of the file before I use it?

[Admin]

@hi_victim

why is it not working?

I don’t know. You won’t let us check. No domain = no troubleshooting.

@hi_victim

Do I need any code at the start and end of the file before I use it?

No, you don’t need any .htaccess rules for your website to work. If the rules you have right now are causing 500 errors, it’s because the rules you have added are invalid.

[hi_victim]

therearetomanynamestaken.great-site.net

For now, I’ve removed the files that cause problems. I’ll add them in again when I’ve got a laptop/pc available.