Greetings!

One comment about using the full XML interface. It is too powerful. There are a lot of options on there that I would not want to provide to a dorm full of people. Things like being able to change the song or playlist (very irritating if I am listening to something at the time), volume or playback controls. Worse, and I don't know if this is locked down with the hijack password, is the ability to put the player into read/write mode and reboot. Not that anyone would intentionally do something like that, it can happen by accident, and is very annoying to clean up later.

I hacked apart charcoalgrey's (and probably a lot of other peoples') code (sorry about that) to create a very minimalistic web front end, showing the player real time and linking to the built-in hijack XML interface. Not as pretty, but a lot more secure. For even greater security, you can disable the XML and only display the pages or ftp index that you allow.