The explicit use of index.php is by design. At the time, since the site was under construction, the client did not mind using index.php as long as it was removed at launch.

If you just want to password protect the store with no splash page, just leave “DirectoryIndex index.php” alone. Don’t change it to index.html and that should do it, I think.

This way you will not be able to browse the store, also not when explicitly opening index.php, because you will always be getting back to index.html.

Is there a way to be able to browse, so use, the store but only after login/password autorization? This way outside public cannot enter and you can work on your shop until ready.

Mark