Curebit timeout

@calvinfo @ianstormtaylor i'm moving the newly updated replace method to hopefully fix this injection issue, crit?