I have site with .htaccess which redirect to subfolder "/web"
RewriteEngine On
RewriteCond %{SCRIPT_FILENAME} !-f
RewriteRule !^web(/?|/.+)$ /web%{REQUEST_URI} [L]
And .htaccess in "/web" which redirects to index.php and set password protect.
RewriteEngine On
RewriteBase /
RewriteCond...