从Location标头转换为Content-Disposition标头,以消除浏览器警告

Until now I used Location header for downloading files from my website. It was giving in Chrome

This file could be dangerous | Discard message. (At least on Windows.)

I have the very same files hosted on many software websites and nowhere it gives such a warning. That is why I looked around for a solution.

On Header Test I get this

HTTP/1.1 200 OK => 
Server => nginx
Date => Sun, 24 Apr 2016 10:24:19 GMT
Content-Type => application/zip
Content-Length => 10635840
Connection => close
Set-Cookie => lng=en; expires=Mon, 24-Apr-2017 10:24:19 GMT; Max-Age=31536000; path=/; domain=www.vlastimilburian.cz
Accept-Ranges => bytes
Content-Disposition => attachment; filename="extreme_password_generator.zip"
Content-Language => cs

And after I set the headers in this download script

https://www.vlastimilburian.cz/download.php?pid=12&portable

I run the following:

$fn = fopen($product_object->get_file_name(), "r");
fpassthru($fn);

Which is completely different solution than using Location header. Yet so far no success.

Am I on the right track? Or what do I miss?