title: How secure is htacces/htpasswd?
body: <p>Only one or two trusted people have the password. htpasswd is outside of public_html directory. The script in the protected folder contains un-sanitized inputs. Is SQL Injection possible, without the password?</p>