I am curious if it is a security risk to keep internal files within the same level of the accessible directory. I am using Plesk to manage my server.
Plesk sets up the directory structure as such
Within the example.com directory, the http directory is accessible to the public via www.example.com
i have added additional directories within the example.com directory to keep everything in the same spot. The additional folders contain sensitive information.
I know that these folders are not directly accessible to standard users but im curious if i should move them up the directory hierarchy so i only have the public http directory. Or is this something i dont have to even worry about