The filemanager class can be used to create a php filemanger, you can define a chrooted kind of basedir, and use the $_GET array to define a subdir. It has some built in
protection against "?subdir=../" stuff and it has alot of little extras, like sort functions, MIME type checks and lots more. I have been using it a long time now, and it never
failed me :)