Purchased ticket storage

Where should purchased tickets to be uploaded and why it uploads them to the themes root folder?