You could also have a look at Apache::Htpasswd and merlyn's Basic Cookie Management.

I am with Kanji though, .htaccess does authentication at a directory level and hence before your script is even accessed. What is it you are trying to do?

--
Until you've lost your reputation, you never realize what a burden it was or what freedom really is. -Margaret Mitchell