It is unsafe to delimit access in this way. If the directory accessed by FTP, is also available via HTTP, you can access it via FTP download the script and execute it over HTTP - in this case, limiting the root directory FTP will not work. This feature should be used solely for convenience. Complete isolation can only be achieved by hosting the site in a separate hosting account.
Sometimes it may be necessary to provide a third party (for example, a website developer or a third-party specialized specialist) with temporary access not to the entire contents of the hosting account, but only to a specific directory (for example, the directory of a specific site or subdomain, without access to neighboring sites of the hosting account ).
To grant access to a specific directory, do the following: