# SCpanel v1.3.5 — FTP / SFTP

## MUST features
- FTP account lifecycle: create/delete, password change, enable/disable, restricted directory and quota.
- SFTP users with password and SSH public-key authentication.
- Restricted SFTP chroot homes using OpenSSH `internal-sftp`.
- vsftpd explicit SCpanel user allow-list and per-user chroot.
- Hosting-account isolation for FTP directory selection; `..` and symlink escapes are blocked.
- Usage reporting for managed transfer directories.
- Filesystem user quota integration through `setquota` when the target filesystem has user quotas enabled.
- SCpanel-managed OpenSSH drop-in and safe `sshd -t` validation before reload.
- Existing vsftpd configuration is preserved except for SCpanel-managed keys.

## Security
Transfer usernames are real Linux accounts with `nologin`/`internal-sftp` shells. FTP users are admitted only through the SCpanel-managed vsftpd allow-list. SFTP forwarding/tunneling/X11 features are disabled for managed users.

## Compatibility
The feature requires `vsftpd` for FTP and an OpenSSH server for SFTP. Disk quota enforcement depends on Linux filesystem user quotas being enabled; SCpanel reports when the host filesystem cannot enforce the requested quota.