Please provide steps to reproduce. It should look like:
1) Go to the page http://.... and log in with the username and password:
2) Then try to go to this page: http://
I think you should not be able to view that page, but you can. What did I do wrong?
With a post like that, I can reproduce the issue and tell you what is wrong since I already have your FTP information.