Secure Laravel 7.x and save new php scripts ?

Hi

We are trying to secure a Laravel 7.x project as we learned the hard way when an exploit to our work occurred via /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php and a malware was installed on our server.

We changed the setting from developments and changed the root document on our VPS server from /public_html to .public_html/public and set up .htaccess to secure composer and .env

Which folder and route is best to use to run php scripts or if we want to add another php script or cms to run a blog on the page.

Thank you