Whats wrong with your subdomains? If you can set up a FTP account for a user, then they should only have access to that directory (username would become 'subdomain')