[spadacom]

I'm not sure if this is the right place to post this. I am working on a website for a non-profit. They have some information that should only be available to members of the organization. Currently I have the directory password protected via cpanel. I am trying to find out how secure this really is?

Is it easy to hack?

Is there a better way to go about securing it? Is using .asp a better option?
(I am not too familiar with asp or php but have seen password scripts on the web)
I am also considering adding SSL to my current setup with the password protected directory. Any advise greatly appreciated.

Thanks