Should be placed securely in a folder called “temp” in the web root

Can be placed anywhere in the web root as long as there are no links to them

Should be completely removed from the server

Can be placed anywhere after changing the extension