Reply to thread

htaccess/htpasswd are systems I've been using for a while and they are definitely useful. I was basically just thinking out loud and wondering what people would think (hence why this isn't in suggestions).

I think PIN-based systems aren't something people expect, and although they're limited, if they're implemented as a stage 2 (after having the correct password), people won't know it's there unless they have the correct password. Using htaccess/htpasswd implementations, people know as soon as going to admin.php that they require this logon information. People don't attain information they don't know they need.