diff --git a/.htaccess b/.htaccess
new file mode 100644
index 0000000..53cac3b
--- /dev/null
+++ b/.htaccess
@@ -0,0 +1,4 @@
+<IfModule mod_rewrite.c>
+RewriteEngine on
+RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]
+</IfModule>
\ No newline at end of file
diff --git a/ics.php b/ics.php
index 5b930aa..fd03a78 100644
--- a/ics.php
+++ b/ics.php
@@ -1,32 +1,46 @@
-<?php
-	require 'settings.php';
-
-	if (isset($_POST['password']))
-	{
-		$password = $_POST['password'];
-
-		$curl = curl_init();
-
-		curl_setopt($curl, CURLOPT_URL, $url);
-		curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
-		curl_setopt($curl, CURLOPT_USERPWD, $user . ':' . $password);
-		curl_setopt($curl, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
-		$result = curl_exec($curl);
-
-		if (!$result)
-		{
-			die('error');
-		}
-		curl_close($curl);
-		die($result);
-	}
-?>
-
 <html>
 	<header>
 		<title>Evénements à venir</title>
 	</header>
 	<body style="font-family: helvetica; line-height: 24px; font-size: 16px;">
+<?php
+	require 'settings.php';
+
+	if ($password && (!isset($_SERVER['PHP_AUTH_PW']) || $_SERVER['PHP_AUTH_PW'] != $password)) {
+		header('WWW-Authenticate: Basic realm="bbn"');
+		header('HTTP/1.0 401 Unauthorized');
+		die('<p>Access denied.</p></body></html>');
+	}
+
+	// Get ics file
+	$curl = curl_init();
+	curl_setopt($curl, CURLOPT_URL, $url);
+	curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
+	curl_setopt($curl, CURLOPT_USERPWD, $user . ':' . $password);
+	curl_setopt($curl, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
+	$result = curl_exec($curl);
+
+	if (!$result)
+	{
+		die('<p>Error while getting ics file from caldav server.</p></body></html>');
+	}
+	curl_close($curl);
+
+	// port "showresult" js function:
+	$recent = 7;
+	if (isset($_GET['recent']))
+	{
+		$recent = $_GET['recent'];
+	}
+	$recentonly = isset($_GET['recentonly']);
+
+	echo '<h1>Evénements à venir</h1>';
+
+?>
+	</body>
+</html>
+
+<!-- old -->
 		<div id="content">Récupération du calendrier...</div>
 		<script type="text/javascript">
 function ics2json(input)
@@ -165,5 +179,3 @@ xhr.setRequestHeader('Content-type', 'application/x-www-form-urlencoded');
 xhr.send("password=" + password);
 
 		</script>
-	</body>
-</html>
diff --git a/settings.php.sample.php b/settings.php.sample.php
index 3de1331..564c3d6 100644
--- a/settings.php.sample.php
+++ b/settings.php.sample.php
@@ -1,4 +1,5 @@
 <?php
 	$url = 'https://caldav.example.com/path/to/calendar';
 	$user = 'caldavuser';
+	$password = 'caldavpassword';
 ?>
