Hi,

I have recently started a forum and am wondering where I should locate the error logs for such things as database backups and failed admin panel login attempts.

There is the public_html folder, but Im concerned that Anything contained within this folder is accessible to prying eyes. Is this true?!?

I have also heard of directory traversal, which I imagine could fall under the same category.

Would I perhaps be best off creating a folder outside of public_html for the holding of these valuable targets?

What would I best to do to secure my server in this regard? It would have to be writeable for the system to be operational.

Thanks!