The other alternative is to create a php prepend file which does some authentication for you. Require a password, and if they enter a password, set a cookie. If the cookie isn't present or they don't give the correct password, display the login page with errors until they successfully log in.