The Installation Directory
It is highly recommend that your private directory files be somewhere outside of your web root if you install the KHXC in the web root. Also, to install in the web root, your webserver user (usually 'nobody' or your FTP account username) needs write access for the web root directory.
Wiki: Getting Started