I'm trying to secure my admin section.

I went to Setup:AdminPassword and entered a user and a password. I received a message that the directory was password protected. There are .htaccess and .htpasswd files in the ../admin directory.

But when I (or others) go to the admin page, we are not asked to login and have full access to the admin section.

I tried deleting and re-entering the user without success.

We are running under apache.

Thanks for any suggestions.

Bob