[Apache] Are files from a password-protected directory available via direct links?

Question

Apache HTTP Server

Hello.
Noob question, but Google didn't come up with a solution.
The files-list directory contains the following .htaccess:

Options +Indexes<br/>
IndexIgnore passw-data<br/>
<br/>
AuthName &quot;Registered users only&quot;<br/>
AuthType Basic<br/>
AuthUserFile %site_dir%/files-list/passw-data/.htpasswd<br/>
Require valid-user

Passw-data contains .htpasswd itself and another .htaccess:

Options -Indexes<br/>
Deny from all

Denver Apache digests all this well and asks for authorization when trying to access both directories and files inside them. But after transferring to the server, everything turns out differently: when accessing the directory, authorization is requested, but if you type the full path to the file from this directory, it is given to unauthorized users without any requests.
Tell me, please, how can I fix this?
PS: well, at the same time, kick the solution as a whole (you just need to organize a password-protected section with files)
PPS: on the Apache 1.3 server

Answer 1

Apache is 100% nginx )))) and he didn't care about any restrictions in .htaccess