securing a directory

[spadacom]

I'm not sure if this is the right place to post this. I am working on a website for a non-profit. They have some information that should only be available to members of the organization. Currently I have the directory password protected via cpanel. I am trying to find out how secure this really is?

Is it easy to hack?

Is there a better way to go about securing it? Is using .asp a better option?
(I am not too familiar with asp or php but have seen password scripts on the web)
I am also considering adding SSL to my current setup with the password protected directory. Any advise greatly appreciated.

Thanks

[kwvarga]

I assume the cPanel administration uses .htaccess to password protect the directory

First off, if you dont want it read, dont put it on the internet.
Thats basically the rule of internet security because anything is hackable

I think .htaccess is the best option, but there are flaws
like there are programs that use proxies and try tons of user/pass combinations by brute force, but yeah.
I think .htaccess is secure enough for MOST purposes

[hatchet]

I agree with Kyle.. the one downside to .htaccess is it's not all that flexible for multiple users - unless they have something like a corporate username/password combination. If you get more than 10 users with different user/pass combos I would look at something with php and sessions or similar.

[number7]

Create 2 or more directories each inside another and add a password to each.
Hacker will now enter 2 or more passwords to hack into your site.

JOOKING !!!!!!

But it's kind'a interesting if it would work really What you think ?

[spadacom]

Thank you all for your feed back.

Thats pretty much the answers I was looking for.