> I don't think you need to disable robots.txt, at

agreed, you're not downloading images from /images you're trying to get
.../download.php?file=xx.jpg
robots might have been a problem if download.php performed a redirect to
/images/xx.jpg (presumably after noting an image downloaded)