Well, the Windows server that I ran the script on isn't mine, so I'm not sure what is and isn't enabled in the php.ini file and what not. I'm storing the server, username, and password as cookies, and I'm not sure if it's storing the cookie appropriately.
However, on login.php the values of $host, $user, and $pass are all accessible via the $_POST superglobal, so it shouldn't matter if cookies are enabled.
If login is successful, it fowards you to file_list.php which lists the files in the directory specified by a URL path called $_GET['dir']. I'll try and see if it's actually logging them in or if it's just the cookie problem on file_list.php.