luos/workflow/engine/methods/users/users_ViewPhotoGrid.php

<?php

use ProcessMaker\Model\User;


if (($RBAC_Response = $RBAC->userCanAccess( "PM_LOGIN" )) != 1)
    return $RBAC_Response;

$direction = PATH_IMAGES_ENVIRONMENT_USERS . $_REQUEST['pUID'] . ".gif";
//	header('Pragma: ');
//	header('Cache-Control: cache');


if (! file_exists( $direction )) {
    $user = new User();
    $filters = array(
        'limit' => 1,
        'fields' => ['USR_UID'],
        'conditions' => [['USR_ID', '=', $_REQUEST['pUID']]]
    );
    $result = $user->show($filters);
    if ($result['total'] == 1){
        $direction = PATH_IMAGES_ENVIRONMENT_USERS . $result['data'][0]['USR_UID'] . ".gif";
        if (! file_exists( $direction )) {
            $direction = PATH_HOME . 'public_html/images/user.gif';
        }
    } else {
        $direction = PATH_HOME . 'public_html/images/user.gif';
    }
}

G::sendHeaders( $direction );

DumpHeaders( $direction );

/*
 * This function is verified to work with Netscape and the *very latest*
 * version of IE.  I don't know if it works with Opera, but it should now.
 */
function DumpHeaders ($filename)
{

    global $root_path;

    if (! $filename)
        return;

    $HTTP_USER_AGENT = $_SERVER['HTTP_USER_AGENT'];

    $isIE = 0;

    if (strstr( $HTTP_USER_AGENT, 'compatible; MSIE ' ) !== false && strstr( $HTTP_USER_AGENT, 'Opera' ) === false) {
        $isIE = 1;
    }

    if (strstr( $HTTP_USER_AGENT, 'compatible; MSIE 6' ) !== false && strstr( $HTTP_USER_AGENT, 'Opera' ) === false) {
        $isIE6 = 1;
    }

    $aux = preg_replace( '[^-a-zA-Z0-9\.]', '_', $filename );
    $aux = explode( '_', $aux );
    $downloadName = $aux[count( $aux ) - 1];

    if ($isIE && ! isset( $isIE6 )) {
        // http://support.microsoft.com/support/kb/articles/Q182/3/15.asp
        // Do not have quotes around filename, but that applied to
        // "attachment"... does it apply to inline too?


        // This combination seems to work mostly.  IE 5.5 SP 1 has
        // known issues (see the Microsoft Knowledge Base)
        header( "Content-Disposition: inline; filename=$downloadName" );

        // This works for most types, but doesn't work with Word files
        header( "Content-Type: application/download; name=\"$downloadName\"" );

        //header("Content-Type: $type0/$type1; name=\"$downloadName\"");
        //header("Content-Type: application/x-msdownload; name=\"$downloadName\"");
        //header("Content-Type: application/octet-stream; name=\"$downloadName\"");
    } else {
        header( "Content-Disposition: attachment; filename=\"$downloadName\"" );
        header( "Content-Type: application/octet-stream; name=\"$downloadName\"" );
    }

    //$filename = PATH_UPLOAD . "$filename";
    readfile( $filename );
}

//G::header2( "location: /files/" .$_SESSION['ENVIRONMENT']. "/" .$appid, $filename);