.htaccess security

[pinehead]

I'm wanting to store some information in an online accessable folder under my web directory protected by .htaccess authentication.

This information is possibly sensitive.

Is this a secure method of doing this?

If so is using .htaccess all i need to do? Or is their something else i need to do as long with it?

Thank you
Anthony

[countach44]

I'd recommend you just doing this in your httpd.conf, but .htaccess could work, here's a good tutorial:
http://httpd.apache.org/docs/howto/auth.html

I've gotten it to work before, but for some reason it isn't working now for me, same configs as on the old server too...

[Blaqb0x]

It depends on how you want to set up your http server to restrict access to it.

You can restrict the IP addresses that can connect to the server or/and you can password protect it. Using both on top of configuring your server for https should give you some really good protection. Or you can just use ssh.

HTH