[swexpert]

Hi Chris,
It seems a redirection issue. Oscommerce redirects to a secure page (folder) by default. You're protected the main folder as well.

What is happening is:
main-site/.htaccess (set by osc) -->redirect-->/yourshop_root/ (which has an htaccess with password)

IN the above scenario, you added
main-site/.htaccess (now with password) -->redirect-->/yourshop_root (which already had password protection)

OSC uses redirection a lot , loads another index file once you get authenticated. But because the parent is password protected, the system asks for password again.

Post your .htaccess file minus username/passwords so that someone may take a look.

Regds
IJ