Many years ago I had to do the same thing, but I wasn't the sysadmin and thus couldn't change the apache config file to allow .htaccess. If you're in the same situation, I would speak kindly to the admin (bring cookies) and if the admin is a complete idiot (many are) and doesn't want to change anything on the server, I would resort to encrypting the data in textfiles. You would have to change the ownership of the file(s) to the user usually called 'nobody'. This is a special account used by the server. Make sure the permissions on the file are correct. You could play with the permissions to make the files a little bit more secure, but really This Is The Wrong Way To Do It. However, in life, you sometimes have to make do with what you have and lucky you have Perl. :)