FTP access security

[Rila]

I'm not good at website design so I'm letting someone access my site through FTP so he can make my website for me. What is the most he can do if he were do do/steal/upload anything?

I have a blog, forum and other scripts installed. Will he be able to access passwords from my blog or my forum member's passwords?

It's just so I know what to expect.

Thanks in advance.

[djmatt]

If you set up a separate ftp account for this person, the only thing you have to worry about is them uploading code that violates the TOS of Bluehost. If you give them your main account's password, they can see everything you can. However, any good blog or forum package will hide passwords even from you.

[Bob Barr]

Someone with FTP access to any account folder can also upload a malicious script (either deliberately or inadvertently) that can access any portion of your hosting account. Once that script is executed, there is no restriction on which folders they can access within your account.