in reply to CGI vs Tk for application backend

I'd probably go with the web interface for maximum flexibility and usability (with inexperienced users, like you said). If you want the site to be accessible from a specific computer, just use Order deny,allow Deny from all Allow from ip address (Though I don't understand why you can't just password protect it)