Hey Hey,

As others have mentioned an NDA is definately the first thing you want to do.

As far as releasing the credentials to the FTP... I personally wouldn't do it.. If it's just a page of php... there's no installing to be done. It's just a matter of uploading it... You could download the entire site and provide him with an archive containing all the files. Is this your own server, a company server or do you pay for hosting... If it's your own server or a company server make sure you don't give him credentials that are also a valid login for telnet/ssh if you have those services running and decide to give him access.. Also if it's hosting you pay for, be adviced that usually the cpanel, usermin, whatever management system you use has the same password as your FTP account... meaning he'll have full access to your hosting, which if it's like certain ones I have could contain credit card details.

Nokia asked a good question in how you met him... I've done work on for a number of people, some who ran across business websites I've had, and others who were friends of a friend or relatives of a friend... and the work experience is different in either case...

Does the server have php on it? If it doesn't that could be a good reason why the script doesn't work...

Before you do anything ask him to justify how having FTP access will assist him and what he hopes to accomplish with the access. Let us know what you find out.

Peace,
HT