Hi

I am working on a admin script for one of my sites and just wondering is password protecting the directory that hold the admin files is enough for security.

Yes, if you use a secure password (brute-forcing http auth is pretty easy, so choose a long, non-dictionary password).