http://serverfault.com/questions/46575/apache-authentication-allow-public-access-to-a-subdirectoryShouldn't be a problem with .htaccess, depending on what the host has allowed. You could try putting a .htaccess in the sub-folder withAllow From All Satisfy Any