It does not have to be directly web-accessible (i.e., you can view the directory through your web browser by typing in the URL) or under WordPress directory.
You can enhance the invisibility of files by placing the following to.