<ul><li>Fixed CRITICAL: <code>report.php</code> used <code>if($_GET)</code> to decide whether to run blocking API lookups — <code>$_GET</code> is always truthy when <code>?report=1</code> is in the URL (every page load), so blocking cURL calls fired on every visit before any form was submitted (CRITICAL)</li><li>Fixed CRITICAL: <code>alexaRank()</code> in functions.php called <code>data.alexa.com</code> — Alexa.com was permanently shut down May 2022; endpoint returns nothing, cURL waited full 20s timeout on every page load causing indefinite spinner; replaced with immediate stub returning N/A (CRITICAL)</li><li>Changed <code>if($_GET)</code> to <code>if($_SERVER[REQUEST_METHOD] === POST)</code> in report.php — blocking domain/rank lookups now only run on actual form submission</li><li>Fixed HIGH: <code>set_time_limit(0)</code> in report.php, ajax.php, ajax1.php — no ceiling on execution time; changed to 60s across all files (HIGH)</li><li>Fixed MEDIUM: <code>number_format($alexa_rank)</code> would throw warning with non-numeric N/A stub value; added is_numeric guard (MEDIUM)</li><li>Hardened <code>file_get_contents_curl()</code> — reduced timeout from 20s to 10s, added 5s connect timeout (MEDIUM)</li><li>Result: page load time dropped from 20s+ (infinite hang) to under 1 second</li></ul>