[iceblue]

This is nut’s. First I want to know how everyone had permissions? Why did we need 777 permission on the FTP? It would be very simple to login to the server setup with something like cpanel or even set ftp permission in a consol. How in the world did the server not allow this?

I assumed peoples folders were approved by the admins and they received a write permission over there folder. Have the server Logs gave to you from the admin and check what IP and time the files were deleted then trace the ip pool. You can then call the company you find the user hosted from talk to the admin there have the records of the ip used on the delete and time to match his assigned pool addresses to registered user MAC addresses. That will tell you who did it.

Unless he was smart and used another persons user account or public computer and or wifi connection.