htaccess allow and deny with Cloudflare

[prune]

I created an htaccess with rule to only allow my IP to access index.php but this is not working when site is behind Cloudflare

Keyhelp does not do xforward IP by default? I think it sees the visitor IP as Cloudflare's...

[prune]

I already tried directory protection but it seems it will protect the whole path beyond /sub/

I want protected access to

domain.com/sub

But this should be accessible without pass

domain.com/sub/?img=123.JPG

Anyway to do this via htaccess manually please?

Thanks

[Alexander]

You have to tweak your webserver settings, in order to get the real IP.

https://www.google.com/search?q=apache+cloudflare+ip
https://devanswers.co/get-real-client-i ... pache-php/