WHMCS Services Forum

We recommend moving data writeable directories to a non-public location to prevent web-based access.
Edit the config.php file and specify the path to the new location by adding a new line:

$ws_upload_folder = "/home/user/newfoldername/";