Which directory do I have to put the database in ?
Any directory can be used as long as your connection strings points to the right place. You can now use the /db directory to store your databases in, this is above your webspace and so is a much safer place to store sensitive information