not completely true Ooble.
look up the use of .htaccess files in google, I'll start you off with a
link
in order to write a complete login/logoff access system, yes, you'll need PHP, but this way you can secure directories, and i believe even certain files.
-Dizz