You are probably better off using the .htaccess solution -- it is robust, time tested, and scrutinized. It is just far too easy to make mistakes when parsing directories. The .htaccess solution has already done the hard stuff for you. You just need to tell it what groups to allow in.