The file can be put in any folder within you account, as long as it is somewhere below the public_html folder, then you can link to it like you would any other file. In terms of security there isn't any best place as you will be giving the link to it away anyway.