Haha, thank you so much for your feedback from the first challenge.
Especially thanks to a special person who sent in a fixed .htaccess to secure my pages.
The protected/protected.php is now secured :)

To prove me wrong, please access protected/protected.php again.