1) They can go in a subfolder if you wish, or they can be at the site root, it's up to you.
2) no, they go to the confirm page, thats when it gets sent to authorize.net
3) yes, that is correct.
Your friends over here at WebAssist! These Dreamweaver extensions will assist you in building unlimited, custom websites.
These out-of-the-box solutions provide you proven, tested applications that can be up and running now. Build a store, a gallery, or a web-based email solution.