Is it security risk. i see no risk at all. i wont argue about it. but here is how i was think it will work
you going to have Two folders.
Folder with anyn access or user name and password with permission to read.
second folder will be an upload folder to each person personal folder
its going to work same as VB but with FTP integration
i would do it if i know anything about PHP