If UBB runs as a dedicated user and you chmod the Members directory to 700 (and chown the directory to the UBB's user), "nobody" no longer has access, so the other-member's-script method no longer works.

Graeme