Not sure how to quote your comments sorry
So...
- No, the FTP server is plain text username and password. The End user should not know these credentials.
- The protocol is for transferring files yes, but no local file is required to put a file on the remote server. The STOR command identifies the remote file name, the PORT or PASV commands identify network connections over which the data for that remote file should be read (this is my understanding anyway).
- No, I have no access to the remote machine, can't run code there. Can't change it's auth mechanisms. Can't do nuthin' :)