Well there are a couple of ways to do this but my first question is what programming language do you use? Many languages will have a built-in login framework. I know Dreamweaver has a built in login user framework under the "Application Panel-->ServerBehavior-->UserAuthentication" panel. It's very useful and is used along with the "Restrict Access" , "Log-Out User", Login User" and "Check Username" behaviors. Of course you'll need a database and need to understand SQL.
A very secure way to do this is with what we call Acess Levels. Basically have have a Users Table with basic user Information in your Databse. This table will generally have a few colums. Usually a UserID, Username, UserRole or AccessLevel and maybe a few others.
Basically you're controlling access by having them login but they'll have to provide correct username, password, and if they have the right access level they can get in. That's three checks. I have a working example of this on my site in my sig. When Employers Register on my Employer Section....I get an email and so do they. I then go in and change their access level and they'll get an email letting them know they've been granted access into the system. You control the access this way. You can even go as far as showing certain users with certain access levels different content based on their access level.
another way of restricting people is just by ip adresses. I dont know much about IIS (microsoft server software) but I know that Apache lets the administrator let ony certain ips though (your friends computer) and noone elses. Its a solution that I programmed at work as part of a working wiki.
but its just an option. I dont think it exacly applies to you but it gives you one more option.
__________________
_____________ http://mchris.co.nr/wiki
For all your Computer Science needs (free programs too!!)