It is unsafe to delimit access in this way. If the directory accessed by FTP, is also available via HTTP, you can use FTP download the script and execute it over HTTP - in this case, limiting the root directory FTP will not work. This feature should be used solely for convenience. Complete isolation can only be achieved by hosting the site in a separate hosting account.
Sometimes it may be necessary to provide a third party (for example, a website developer or a third-party specialized specialist) with temporary access not to the entire contents of the hosting account, but only to a specific directory (for example, the directory of a specific site or subdomain, without access to neighboring sites of the hosting account ).
To grant access to a specific directory, do the following: