Or, alternatively, if you do not want to pass off the username & password of the FTP you are browsing, you could technically download the file from the FTP to the webserver and pass a temporary URL to the client. You could also theoretically automatically schedule a CRON job to delete the file after X amount of time... =P