Rahul,
There are two parts to your question. First, you can and should store files in a different directory by specifying an absolute path when you store them on a server.
Second, it's better not to give your users FTP rights to your server. It is better to provide a
servlet that intercepts the upload and download requests. This is much more secure.