NorthStarDA,
Thanks for all your help so far. I don't want to be a pain.
To answer your question, the client is concerned with hackers being able to potentially upload and execute files on the server through a remote location other than the website if the folder is not locked to one account...