But how can I secure a page with username and password? Even without using PHP
Without PHP? If you are running an Apache server, you can use .htaccess and .htpasswd...