<files "sendmessage.php">
AuthUserFile /full/path/to/.htpasswd
AuthType Basic
AuthName "Send Message to Mail List"
require valid-user
</files>

<files "list.csv">
Deny From All
</files>