Sandbox all paths to require it to NOT be in BASEPATH, and to be in APPPATH or FCPATH to keep pesky scripts from grabbing info from the system or overwriting files elsewhere in the system.