por Howard Miller.
"it must not be accessible directly via the web"
As it's under your /var/www path then I expect that it is. After you've put it somewhere else you should check that it can be written by the web server user. If the machine is not shared just 'chmod 0777' it.
Why are you running 1.9.1? That's years and years old!!