On one of our work web sites, we use a windows server and have the folder with the site files password protected through windows. So when a user goes to the website they are asked for name and password and then the site is allowed to run. All a function of Windows.

Ray