htaccess url rewrite and password protection on folder problem

Thanks j4j7. That's exactly what I needed. Worked beautifully!

This whole situation is avoided in Revo using static resources. The resource has all the features of an ordinary resource, including security, but instead of content it has a path to a file.

This path can be outside of the web root, thus preventing any unauthorized web-based access to your files.

Using custom content types (System -> Content Types) and assigning the proper custom type to the resource, clicking on a link to the resource will behave exactly as if clicking on a link to the file itself; depending on the user's browser either loading the content of the file in an appropriate application or offering it for download.