It already is protected, you can't use ultimatebb.cgi, cp.cgi and ultimatebb.php in images. Also, everything that that stuff damages needs method="post", so it won't harm even if some user will somehow bypass it.
Donate to UBBDev today to help aid in Operational, Server and Script Maintenance, and Development costs.
Please also see our parent organization VNC Web Services if you're in the need of a new UBB.threads Install or Upgrade, Site/Server Migrations, or Security and Coding Services.