Move Scripts and SSI Outside Public Root

[user2037]

Since SSI and scripts should only be included, they should be stored outside the public root.

[karlbenson]

ideally yes, but not everyone on every type of host has access to a storage area outside the public root.

[user2037]

Then make its location an easily changed setting.

[Grudge]

You can move the source directory easily. That is what we do here. Just change the path in settings. The problem is the install package realistically has to assume you upload it all to one directory. Anything else will confuse all but the advanced admins

[Thantos]

Then make its location an easily changed setting.

It already is.  The value is stored in Settings.php so you can change it manually.  The easier option is to copy the Sources directory to where you want it and the go to:
admin -> server settings -> Sources Directory
Then delete the old directory.

SSI.php is a little harder to move since it assumes the Settings.php file is in the same directory.  If you want to move it then simply edit the file and add the path to Settings.php on the require_once call.