You can create an ftp account (done in cPanel) for your friend, granting him access only to the folder that contain your forum files. Either a permanent account or one that you later remove. That way he does not access your full cPanel and you don't have to give out your login details for the...