via forums.cpanel.net => original post link
Hi all
I’m running a Apache server along with NGINX with Reverse Proxy for caching purposes. The server mainly hosts WordPress sites.
A site owner has noticed users can access pages which are password protected via the basic page visibility feature (ref: How to Password Protect a WordPress Page to Limit Content Visibility).