I read that from a security point of view includes (containing php
code) should be located outside document root.
On an LAMP server, where do you place those includes ?
My document root is /var/www/html (/var/www/html/site1, /var/www/html/
site2, ...). Is for example /var/www/phpincludes/ good enough for
security reasons ?
(This way I do not have to change backup jobs).

Thanx,

JM