The download directory is on the same level as my wwwroot directory.
I have a number of different folders on that level -- none of them are accessible to the internet via browser. Only the wwwroot folder and those within it can be accessed via a browser.
Moving it outside of my wwwroot directory is one of the best methods for protecting it so that it cannot be accessed.




