I have no clue what you mean with "and suddenly, out of the blue, I got a system popup as if I requested to download a file.", but I guess you might like to check out a recent node about securing files on public servers: Securing your scripts on webhoster's server