Password protected client pages and drag & Drop

A couple of questions really. Firstly in the next few weeks I'm going to be starting on a client management system for a marketing agency which will allow them to keep a list of projects they are doing for clients and a list which the clients can also see and contribute to.
The agency develop marketing material (web banners/printed adverts etc.) and want to be able to simply publish work to a page which the client can see (whilst they're logged in). A static example would be like this one:
http://www.cybercan.co.uk/university/banners.html
If they could somehow tick files that they upload as ones that should appear in this preview page that would be great. Each client will have a number of files uploaded relevant to a project but not all of them would be relevant to a preview page. The second question is about drag and drop for uploading files and images. I know it's been talked about and won't be implemented officially but I'd like to contract one of you bright people to take it on. Any takers? The system they currently have is a bit clunky and they'd rather not have to learn about ftp clients.
I'd be interested in talking to people who would be willing to take on some work as I can't find any other way of reaching phprunner experts. ODesk doesn't help.
Thanks,

Richard