Where to store user content (for eg. pics) so that its more secure? Under app/ OR under public/?

[eluser]Dennis Rasmussen[/eluser]
[quote author="Twisted1919" date="1286907081"][quote author="Dennis Rasmussen" date="1286906570"]Use .htaccess to deny direct access to your folders/files.
And then maybe create a class or library to retrieve the files for you when needed.[/quote]
Oh come on ...

For the OP, under your doc root, create a pub/public folder and store them there, i see no problem whatsoever.
http://domain.com/pub/images/blah.png[/quote]

"Oh come on ..." what?
How does your solution make the files secure against hotlinking?