Thanks for the help!

So this file has to be encrypted in order to work? Can I just create a file with the correct name and a log/pass in it and upload it to an obscure directory?

Also, our current .htaccess file has something I haven't seen in the links people have given here. It looks like this:
<Limit GET>
</Limit>

Also, what about the directory path thing?
_________________________
Matt