Do not write CiviCRM logfiles to web-accessible locations

Storing CiviCRM.999AAABBBCCCDDDEEEFFF.log in a web-accessible location means that a large amount of debug data is available to potential attackers.

CiviCRM currently builds the path to ConfigAndLog dir based on the compiled templates path. Both of these files should be stored outside of web-accessible paths to avoid abuse.

Since this is already site-configurable, but it appears common practice to use web-accessible site directories, CiviCRM may need to provide better assistance to site administrators in selecting appropriate locations for these directories.