PHP masked file downloads

if(strstr($HTTP_USER_AGENT,"MSIE"))$attachment="";
else$attachment=" attachment;";
header("Content-type: application/octet-stream");
header("Content-disposition:$attachmentfilename=$file");
header("Content-length: ".filesize($file));
header("Content-name: ".$file);
readfile("/*********/web/$file");