PHP + apache .htaccess

Dear all I dunno this post is in right group or not.If no, please ignore. I am a user that use Linux, apache with PHP + mySQL. I have already written a member login security system with PHP to block any unathorized user to see my homepage. But unfortnately, I found that if ppl know the full path of the material (let 's say pic, movie....) they can download externally without member login from my PHP system. After I research security issue from the web, I had found apache .htaccess which can solve my problem. What my problem is that, can .htaccess perform like a database system which can store users loginID and password, and also set those users have a expired time each ?? thx