This question already has an answer here:
apparently they belong in the includes folder, were they also are. could it be of any use for a hacker to have these two folders in the root?
I've been checking my drupal site and noticed in the root folder were two folders, database and filetransfer:
I dont know if this is hacked or belonging to some module or stuff, does anyone know something about this?