Correction, you can protect directories with a script if you make a script that is called to parse the URL in the first place, as done in the column: "making you dynamic websites with searchengines in mind"
http://www.phpbuilder.com/columns/tim19990117.php3
But this requires access to the webserver's access.conf, which I guess is not available for you either.