Generally, On the hosting public_html is a directory where you must host your code. If you're uploading Laravel projects, it already has a public folder that will protect your code from being publicly accessible. But when working with shared hosting the main issue is that they will not provide you with the root directory changing options, so either you've to move your public folder's content to public_html or you have to put .htaccess to redirect a request to your public folder, and the fact is that this ain't the best way to host. This creates vulnerability for your sites. So, if possible, consider using any cloud or dedicated hosting. There is already one thread that discussed the similar concern: https://laracasts.com/discuss/channels/tips/hosting-on-shared-server-best-practice
@rajeshtva If you are unable to change the name of the public_html directory, then you should rename the public directory in your Laravel application to public_html as well. You will then need to tell Laravel the new name of the directory, as per my answer here:
Also on many of the shared hostings, some developers want to cram five customers sites into one site, don't, Set up a single site per customer and be fair to them.
I am not saying you do this, but I have seen where some try this.
And yes main laravel should be out of web.
Definitely look at that link that @martinbean gave above.
