I'm using php 5 and Apache 2 on windows XP and using a trial version of amember for the time being. I realize I should go to Linux soon, but I have had to put that off for the time being. However, I'm starting to believe that Amember's protection will not work under Windows. I should also mention that I am using a Dynamic DNS server to point back to my own pc where I run my test web site. When I run the protect.php in a browser, I end up putting in the entire path to the protected folder e.g. D:\websites\testsite.com\public_html\xxx\. Amember indicates at some point that protection has been added to this folder and also shows the appropriate URL path for example http://testsite.com/xxx/ and that it is using htpasswd as the method. Also I can see that an .htaccess file is added to the /xxx/ folder. Everything looks fine, but if I type in http://testsite.com/xxx/ in the browser then I am able to see all the contents of this folder. I realize a user would have to know that /xxx/ existed, but that would like not be too difficult to determine. Any ideas would be helpfull. You have a great product by the way and if you can not determine a work around to this problem i'll just dump my SATA drive and go to Linux sooner and implelment your product anyway.
When you move to correctly configured Linux server, there won't be such problem - folder will be protected as it should. aMember writes all necessary files, but seems your Apache installation is not configured to read .htaccess files in website directories.