Hi, hope someone can clear something up for me.
I will be selling file downloads. Although the docs advise serving them from outside the webroot, is this necessary if the filesystem is set to private?
I am thinking of using the Upload Path module to append 'downloads' (or whatever i name my downloads file) to the file path. As these are the only uploads i'll be doing, this seems ok.

Sorry if the answer is obvious but I still have some trouble grasping the difference between Public and Private settings on the file system.

Thanks for any advice.