by Ken Task.
Question ... can you point the domain for your site (best.com isn't the true FQDN) to /var/www/vhosts/best.com/httpdocs/moodle so that the URL now becomes http://best.com
If you can, that would, I think, satisfy the apache restriction you are under where the apache user has access only to what is called 'document root' (/var/www/vhosts/best.com/httpdocs/) because the moodle folder is inside httpdocs and becomes the new 'document root' for your site. And having moodledata in /var/www/vhosts/best.com/httpdocs/ is then protected and moodle app can see and write to the data directory securely.
'spirit of sharing', Ken