Very easy to set up and use. Hey, even I managed it!
Don't wory about security, it is partly explained in the usage guide.
It doesn't use authentication for reasons of flexibility,
like maybe you already have another user management script,
you wouldn't want your users to have to log on twice!
OK, so maybe they could have included an .htpasswd file
to go with the .htaccess file, but I'm sure you're clever
enough to find a resource somwhere else