You need a script that tracks access and stops it. If you just use htaccess, then the hacker can just keep hitting it with a brute force until they find the right user/pass combo's. A script would block them after x attempts and make it tougher (not impossible).
|