Search Page Password Protection: Passwords Are Accepted Again

Password-protecting a hosted search page was refusing the correct username and password. The credentials were being dropped before the check ever ran, so every attempt was answered with another prompt. Fixed: the option now enforces the index credentials as intended.

01 What was happening

The option lives under Index Settings, Search Page Password, and uses the index’s HTTP credentials, the same ones shown under Security in the Control Panel. Your browser sent them correctly. The layer in front of the search page did not pass them through, so the page compared an empty username against the real one and refused, no matter what you typed.

02 What to do

Nothing. If you switched the option off because it kept prompting, switch it back on under Index Settings. The username and password are the ones under Security, and changing them there changes them for the search page too.