[jdiehl]

You have the correct path, but keep in mind that by default the files folder has an .htaccess file with the following:
Deny from all

Normally I leave this in place, and I create a subcategory and add my images or whatever I upload into the subcategory then add a .htaccess file to that subcategory with the simple line:
Allow from all

This retains that security in the files section in case there are future parts that you want to remain protected. Or you could just delete that .htaccess and be done with it, all up to you.