in reply to .htaccess

It can vary, but $ENV{'REMOTE_USER'} is the most common place to look. Alternately, you call remote_user() if you use CGI.pm.

    --k.