@HeartInternet Its not hard to add a check for .htaccess and send those credentials during automated brute forcing. I'm sure they know bynow
