- XML encode everything (especially URL), not just some parameters,
 - use fputs() as appropriate,
 - remove a shadowed variable,
 - print duration as a 64-bits quantity.