like what your hosting provider told you
upload the files to folder httpdocs
also consult your hosting provider if you will be billed using secure socket layer access (https://) to your web site (usually they does) but clear this from them if not then you can upload as well to the httpsdocs since users will appreciate the extra security they have on their account but makes sure it's all been paid for.