FCKEditor integration: security issue

[eluser]Dionysius[/eluser]
Hi to all!
I use FCKEditor on my web-site with CI and it works on admin's page only (admin must login first to have access). Upload module is enabled.
I worry about security. It is possible to open html-pages from fckeditor directory. Can some malicious man to upload something to my server? What can I do to prevent this? How to protect upload.php by password?

Thanks