Fix all 47 bugs — hardened attack engine, UI/UX, proxy, CAPTCHA, config

config.py

@@ -12,13 +12,15 @@ BASE_DIR = Path(__file__).parent
 DATA_DIR = BASE_DIR / "data"
 ASSETS_DIR = BASE_DIR / "assets"
 
-# Ensure data directory exists
-DATA_DIR.mkdir(exist_ok=True)
+# bug #35: removed DATA_DIR.mkdir() side effect from module level.
+# Call ensure_dirs() explicitly at startup instead.
+
+
+def ensure_dirs():
+    """Create required application directories. Call once at startup."""
+    DATA_DIR.mkdir(exist_ok=True)
+    ASSETS_DIR.mkdir(exist_ok=True)
 
-# Proxy source settings (free public sources — no API key needed)
-PROXIFLY_API_KEY = ""
-PROXIFLY_API_URL = ""
-PROXIFLY_FALLBACK_URL = ""
 
 # Facebook
 FACEBOOK_LOGIN_URL = "https://m.facebook.com/login.php"