Does anyone know how to password protect a directory when my ISP has cgi-wrap installed? Apparently when cgi-wrap is installed the .htaccess file is ignored.
You can't unfortunately. You need your ISP's help. They should modify Apache so cgiwrap is used transparently (you can have all .cgi mapped to go through CGIWrap, but preserve the URL's so Apache will do authentication).