fix: Separate the GFI upload directory from the attachment directories
fix: Separate the GFI upload directory from the attachment directories

- ensure that no one can't retrieve GFI export files
- As reported by Vytautas Paulikas and Robert Giruckas from SEC Consult

TheDr1ver/MISP,cristianbell/MISP,Rafiot/MISP,FloatingGhost/MISP,SteveClement/MISP,Rafiot/MISP,FIRSTdotorg/MISP,MISP/MISP,SteveClement/MISP,Rafiot/MISP,crruthe/MISP,devnull-/MISP,FIRSTdotorg/MISP,FIRSTdotorg/MISP,devnull-/MISP,TheDr1ver/MISP,FloatingGhost/MISP,MISP/MISP,devnull-/MISP,Rafiot/MISP,MISP/MISP,cristianbell/MISP,crruthe/MISP,FIRSTdotorg/MISP,MISP/MISP,SteveClement/MISP,TheDr1ver/MISP,crruthe/MISP,cristianbell/MISP,MISP/MISP,SteveClement/MISP,cristianbell/MISP,crruthe/MISP,FloatingGhost/MISP,SteveClement/MISP,FloatingGhost/MISP,TheDr1ver/MISP,devnull-/MISP