You might also want to protect the /albums and /cache folder via htaccess as Zenphoto does not control direct access to the image itself.
http://www.zenphoto.org/news/htaccess-against-hotlinking/
If you really want to protect your site from outside access, the most secure way is to do this server side by using htaccess to password protect it:
http://www.htaccesstools.com/articles/password-protection/