email stats and securing

Hi,

What’s the best way to secure access to login and app folder allowing remote access for email tracking stats?
Blocking by htaccess will not work since email stats still uses many php files inside.
Pls advice.