I am in the process of creating a hosting service for schools in the UK. The basics are that schools can sign up and teachers can add classes and students to these classes and it will allocated a little folder of space they can use to host their web creations. Nothing fancy, just clientside code being uploaded. Where I'm a bit stuck is in the best way to allow them to upload their files. I'd really like students be able to use an ftp-like interface directly in the site to upload and administer their files. They need to be able to upload whole folders of files at a time (which is not possible through http alone I believe?).
I was tempted to use a java ftp applet, but many schools block the ftp port, so this is no good. I am now trying to weigh up my options and would love some advice if anyone had some.
Are SFTP or FTPS viable options for me. I have pretty tricky requirements:
-It needs to compatible with the settings of very restrictive school network administrators or at least provide these admins an easy way to allow it without weakening their security
-It needs to work directly from the site without any desktop applications (hence my proposal of an applet. eg http://www.radinks.com/sftp/sftp.php)
-Preferably, it should work without entering ip addresses, usernames and passwords. Once users are logged into my site they are granted access to the interface (simplicity is the name of the game)
-It needs to provide each student with only access to their own directory. There must be no way for this to be bypassed.
-Obviously I'd like them to be able to view, move, add, rename and delete files on the server through a simple easy to use interface.
I'll be using a php content management system and I can generate the folders, authenticate passwords, etc serverside, but I'm clueless about the file transfer security side of things. I have always used plain old ftp, but that appears to be prohibited in this case.
Any words of advice, recommended applets, other places to search for answers is appreciated!
Many thanks
Andy
