You cannot add authentication for a directory instead of a file with php. PHP code can only be added to a page. You should still be able to prevent injection on the pages themselves as well.
Your friends over here at WebAssist! These Dreamweaver extensions will assist you in building unlimited, custom websites.
These out-of-the-box solutions provide you proven, tested applications that can be up and running now. Build a store, a gallery, or a web-based email solution.