the server its on isnt mine, but i dont think they're running php as a cgi process.
maybe this will help in solving my problem, this is whats in the htaccess file in the protected directory:
AuthType Basic
AuthName "Administration"
AuthUserFile "/home/name/.htpasswds/sites/1/2/3/passwd"
require valid-user
then in the directory its pointing to is this:
username: password (replacing username and password with an actual user and password )
I set this up using the control panel that the server provided, do you think i should have created my own htaccess with the htpass file in the same directory and with a htgroup file?
thanks for your reply.