Remove all base directory logic and limit to content dir

[dd32]

Due to a stream of ill-imformed security vulnerability notices the plugin should be limited to the WP_CONTENT_DIR folder going forward, and in the case of multisite, the individual sites upload folder.