allow from 000.000.000.000 where 000.000.000.000 is the IP address. If you only specify 1 or 2 of the groups of numbers, you will allow a whole range. how would you write that in the .htaccess file? also, if you can help me with my .htpasswd that'd be cool. i have it in the same directory as the .htaccess and the file contains AuthName "Admin Area" AuthType Basic AuthUserFile .htpasswd Require valid-user and the .htpasswd has my name:password FBI_Agent

http://www.javascriptkit.com/howto/htaccess.shtml Refer to Deny users by IP for the first question, and Password protection for the second.

well thanks for that first part about the IP address blocks. the password thing still wont work. i have //htaccess AuthName "Admin Area" AuthType Basic AuthUserFile .htpasswd Require valid-user //htpasswd John:Doe it'd be a lot of help if you could just tell me what to put to make it work instead of refer me to a site that says the same thing that i have. thanks FBI_Agent