You can set the permissions so that the attacker can't modify it?