Is it posible to protect a website if the site was called by a given domain name?
www.domain.com -> no password protection www.domain.net -> password protection
Both of the URLs are routed to the same document root.
If you have multiple virtualhosts, you can add password protection to one and not the other via the following directive:
Here is more information on this: