! Don't allow $boarddir, $sourcedir and $settings['theme_dir'] as attachment directories. Partial fix for #899

Signed-off-by: Michael Eshom <oldiesmann@oldiesmann.us>