1000 FAQs, 500 tutorials and explanatory videos. Here, there are only solutions!
If you put a file in the /data directory (at the root or for an ftp user) this file will not be accessible in HTTP but only from the server where your website is hosted (whereas if you put it in the /web directory, it will be accessible in HTTP).
An include is however still possible (click here).
Link to this FAQ: