I have a site written in php hosted on goadddy that before viewing a user should have to enter a username and password. If the person doesn't have a username he or she should be able to fill out a form and request one. It doesn't need to be perfectly secure against all possible hacker attacks, but rather just to make the point. Cheap and turned around quickly is the most important.