New posts in Document Root

What is the best way to hide a websites folder/ directory files

Access a file which is located before / outside the server root directory?