Basic Authentication and PHP files

[Ellimist]

I have a configuration block like this :

[code]
	location /members/ {
		index  main.php;
	}

	location ~ ^/members/(?:text1|text2|text3)/(?!noinclude)[^\/]+/ {
		auth_basic            "Restricted Area";
		auth_basic_user_file  /home/password/.htpasswd;
		rewrite ^\/(members\/[^\/]+\/[^\/]+)\/$ /gallery.php?path=$1&page=1
last;
		rewrite ^\/(members\/[^\/]+\/[^\/]+)\/page([0-9]+)\.php$
/gallery.php?path=$1&page=$2 last;
	}

        location ~ \.php$ {
                fastcgi_pass   127.0.0.1:9000;
                fastcgi_index  index.php;
                fastcgi_param  SCRIPT_FILENAME 
$document_root$fastcgi_script_n$
                include fastcgi_params;
        }

[/code]

The problem is that whenever I go to
http://mydomain.com/members/text1/anything/ or
http://mydomain.com/members/text1/anything/pageX.php, it correctly
displays the redirected page from gallery.php correctly, but it requires
no authentication. The images and other elements embedded on the page
from within the directory requires authentication, however.

I'm using v0.8.54.

Posted at Nginx Forum: http://forum.nginx.org/read.php?2,175467,175467#msg-175467