Sorry for a dumb question, or if I'm in the wrong forum.
I want to hire a freelance developer to upgrade my (Drupal) website. They will need FTP access, of course, but I don't want to take a risk with this.
How can I limit their access? Could I somehow make a copy of my site, give them access to that domain only, and copy it all over once the upgrade is completed?