I have a directory that is configured to require authentication (AUTHMySQL) and that is all working properly. The difficulty arises when I try to include SSL. When I use 'https' in my URL, authentication goes out the window. I am able to access anything in that directory without authenticating. As a related problem, if I use 'http' then create a rewrite rule in .htaccess to force 'https' after authentication, the authentication works but none of the 'PHP_AUTH_*' variables are set and if the user clicks cancel on the authentication prompt, access is granted anyway. Can someone help me with the configuration so I can get both SSL and authentication? TIA.