Read through the whole thread -- you should be able to ameliorate the security problem by setting "AllowOverride" for the ibay, and adding some lines to /home/e-smith/files/ibays/<ibayname>/html/.htaccess.
A better way of doing the same thing would be to use a custom template for the ibay section of httpd.conf.