That looks fine if you want to pay for something, and for the glitz, but this option is probably already available to you for free (may require consultation with your host at the most):
Thanks, Cubamark. I am looking at the free (lite) version of ebGATE and was just wondering how secure this simple solution really is.
Not being familiar with html or java, I am hoping for a solution a little easier to understand than .htaccess. ebGATE does not need any special configurations to fit in with the web site host.
Web servers are "stateless". I.E. they have no memory of what went on before. When you use a password on a non-SSL site you have the illusion that you send the password only the first time. In actual fact your web client remembers the password and sends it with every subsequent request. The password is sent "in the clear" and the web page requested is returned "in the clear". If the web server supports SSL connections ( you type in https:// instead of http:// ) there is a tunnel created between (around ?) the web server and the client. Everything passed back and forth is encypted so it is unlikely that a sniffing programme can eavesdrop on the transactions.