i have a server running apache2 in a debian lenny.
something strange happen with the folders protected by .htaccess.
basically, if you put a wrong password but formed by the_correct_password + _more_chars it let you enter. if you put the incorrect password in other way, of course it tells forbidden.
so i ask, is this behavior correct? if you put a correct password first + any other chars let you enter? how can i make apache check for a exactly correct password and not a correct password in the beginning of the entered password.
i hope i have explained the problem in the more clear way :)