you should also be able to move your downloads folder above the root.
would require changes to the configure.php files
in the includes/configure.php change
Code:
define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');
to
Code:
define('DIR_FS_DOWNLOAD', '/home/username/download/');
define('DIR_FS_DOWNLOAD_PUBLIC', '/home/username/pub/');
and in the admin/includes/configure.php
change
Code:
define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
to
Code:
define('DIR_FS_DOWNLOAD', '/home/username/download/');
this will let the admin verify the file is in place and you get the little green light
* replace /home/username/ with your actual server paths.....