! Don't allow $boarddir, $sourcedir and $settings['theme_dir'] as attachment directories. Partial fix for #899

Signed-off-by: Michael Eshom <oldiesmann@oldiesmann.us>
Merge pull request #943 from Oldiesmann/release-2.1

! Don't allow $boarddir, $sourcedir and $settings['theme_dir'] as attachment directories