Tank Auth with .htpasswd

[eluser]ScrewLoose[/eluser]
Hey thanks for the advice I currently do have an index.php block file in my directories to keep people from peeping into the directory. However, my current issue is regarding user specific directories, where a user logs in and sees a completely different setup (i.e. - webroot/safe/user1/images, webroot/safe/user1/css, etc.) which means they can be accessed at anytime, so long as someone knows the url...Their views remain gaurded by Tank_Auth. I was wondering how I'd be able to change it so it would be able to check if someone was logged in before gaining access to a directory. It's my understanding that my assets should not be placed within the applications folder, and my application and system folders exist outside of the webroot. I was thinking I'll have to switch over to BLOBs in MYSQL and call the data from their controller. Any thoughts?