AuthUserFile "/home/user/.htpasswds/folder/passwd" 
--------/الفولدر/-------------/يوزرك/------/----------------

<Files *.txt>
order allow,deny
deny from all
</Files>
RewriteEngine On 
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^([^/]+)/?$ download.php?file=$1 [L] 
<Files *.php>
order allow,deny
deny from all
</Files>
RewriteEngine On 
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^([^/]+)/?$ download.php?file=$1 [L] 

###

# RemoveType php
<IfModule mod_php4.c>
# php_flag engine 0
# php_admin_flag safe_mode On
</IfModule>
<IfModule mod_php5.c>
# php_flag engine 0
</IfModule>
# GET requests only
<LimitExcept GET>
# Order Allow,Deny
</LimitExcept>
###
# php_flag engine 
# RemoveType .php .php3 .phtml .pl .cgi .html .htm .asp .aspx
###

<FilesMatch "index.htm"> 
AuthName "Restricted Area" 
AuthType Basic 
AuthUserFile "/home/x4up/.htpasswds/configuration/passwd" 
require valid-user 
</FilesMatch>

RewriteRule ^([^/]+)/?$ download.php?file=$1 [L]

 chmod(upload, 0777);