Irfan, what about using the .htaccess file to protect the folder.
AuthType Basic
AuthName “My Protected Folder”
AuthUserFile /www/sites/5ce/448/www.domain.com/.htpasswd
require valid-user
only thing is where would the folder be so we can put the file there?