I think that for the config it is necessary to be possible to set a password so in a multiuser environment the configuration can not be changed by everyone.
Also pfm directory should not be accessible.
By the other side this is a nice piece of software.
phpFileManager is a single user script by design. For multiuser i suggest using elFinder or ajaxPlorer.