@mike finley -

Htaccess rules are still quite valid methods for restricting and controlling access to a website. What truly matters is the manner in which they are implemented and managed.

Saying htaccess is not useful is like saying "having a lock on my house is not useful either". Htaccess has been around for a while and will continue to be here for a long time. It is quite use for blocking spam and controlling site access.

Show me a single WordPress security or caching plugin that does not implement htaccess files.

BulletProof security is almost solely based upon htaccess rules, such as changing the htaccess file name, creating separate controls for regular sections and admin and much more.

I use specialty htaccess code all teh time in order to implement specific functionality.