Public backup file (.zip/.sql) exposed on the server

What it is

A backup-looking file (for example a .zip or .sql database export) was found sitting inside the web root, downloadable by anyone who finds or guesses its URL — a single file like that can hand over the entire site and database.

How to fix it

Delete it or move it outside the web root immediately, and make sure future backups are stored somewhere that isn't directly reachable by a browser.