update..again
removing the htaccess, now it works perfect!!
Problem is how can I have a secret hidden test folder to get everything setup
--------------- Added [DATE]1260373985[/DATE] at [TIME]1260373985[/TIME] ---------------
Lynne,
I used your tutorial on my static pages, it is very well writtin and was easy to follow, worked a charm

. On my scripts, well that is a different issue. I read 3 or 4 different tutorials and just could not get my pea-brain wrapped around the concept. Once this one was published I knew that though it may not be the optimal method to use, I could probably make it suit my needs.
Yes, it does have downfalls, I must either go live and do the work on the live pages without htaccess or find a way for the include to send the htpasswd (thinking it can be done but have not investigated yet). The biggest possible downfall is potential security issues having Allow_url_fopen and Allow_url_include = On. I have read there could be issues but have not read what these issues could be. Is it possible you could enlighten me to these issues and any others I may not be aware of?
thanks