Why are you not using WordPress' page functions? They can contain the html lines that you are using in your html file, possibly through the use of Custom Templates.
WordPress will not protect non-wordpress files, simply because it doesn't know it's not there.
Use WordPress for what it is, a Content Management System and you'll have a more secure and yet easier time.