I don't get it saves password or not? Config has a password field but it doesn't work!
Renaming the script is not a very fine solution.
Oops sorry, i've just searched this in the code.
I've found out that it saves password to itself, i.e. to the $doc_root.$_SERVER["PHP_SELF"]
I.e. this file should be writable.
After I chmoded it the password protection works okay. =)
Thanks for a nice shell btw.
You probably should notice about it somewhere in the header, the commented out line doesn't look like it belongs to config.