Interesting reading here:
http://httpd.apache.org/docs-2.0/howto/htaccess.html
Quote:
In general, you should never use .htaccess files unless you don't have access to the main server configuration file. There is, for example, a prevailing misconception that user authentication should always be...