Protect child directories with .htaccess

PHP max_upload_size

Password protect Wordpress (but still use the Flash Uploader)