mrwebb, I think this logon script only let user to logon but not locked the whole dir. like .htaccess
So, I think if you need to locked the whole dir. You need to get username and password and then encrypt into .htaccess and .htpasswd
I hope that I haven't say anything worng.