Well, my best advice is to read the manuals for your webserver software. Generally, they have authentication mechanisms built into them.

If you are using Apache, go to apache.org and search around for 'AuthBasic' .. there are more authentication schemes available that use cookies, databases and other goodies as well.

enjoy.