Limit /file?file= access to certain directories

OpenWebif currently allows the /file?file= interface to download every
file on the box, which is a security issue - think of /etc/shadow,
/etc/CCcam.cfg, and others. This patch limits access to directories
/hdd, /media and /mnt.