This folder holds everything private: config.php (passwords), the database shop.db, invoices,
keys and logs. It must never be reachable from the web (.htaccess locks it) and never be shared.

Put here:
- config.php      copy of config.example.php, filled in
- downloads/      the PDF you sell as a download (one PDF only)
Everything else is created by the shop itself.
