Originally Posted by bountysite
Never backup your site and store backup within docroot folder. They are of no help when site gets infected.
Keep backup in off site location.
I agree 100%
The amount of times i had clients make backups and just save them in the public_html folder.
I kept telling then yes save there and they move the backup to your local PC or another backup server . Keeping the backups in your site folders will not help if we have server issues and the server goes down, but still some client wont listen and its the same with script updates.