PHP - How Do I Implement This Countdown Timer Code?

----------------------------------------------------------this code----------------------------------------------------------------------

<?php if($login_incorrect){  

  if(isset($_COOKIE['login'])){           if($_COOKIE['login'] < 3){               $attempts = $_COOKIE['login'] + 1;               setcookie('login', $attempts, time()+60*10); //set the cookie for 10 minutes with the number of attempts stored           } else{               echo 'You are banned for 10 minutes. Try again later';           }     } else{           setcookie('login', 1, time()+60*10); //set the cookie for 10 minutes with the initial value of 1     } } ?>

----------------------------------------------------in here----------------------------------------------------------------------------------

include('dbc.php');

if(isset($_POST['login']))
{ 
    $username=$_POST['username']; 
    $password=$_POST['password']; 
    if(empty($username) && empty($password))
{
    echo"<script>alert('please enter username and password')</script>";
}
if(empty($username) || empty($password))
{
    echo"<script>alert('please enter username and password')</script>";
}
 $pass= hash('sha512', $password);
     $set="Lecturer";
    $set2='Admin';
    
    $sel="select * from $tb1 where username='$username' and password='$pass'";
       $result=mysqli_query($con,$sel);
       $row=mysqli_fetch_array($result);
       
       if($row['username']== $username && $row['password']== $pass && $row['usertype']==$set)
       {
           $_SESSION["username"] = $_POST["username"];  
      $_SESSION['last_login_timestamp'] = time();  
            $_SESSION['username'] = $username;
            
            header('location:userhome.php');   }
 elseif ($row['username']== $username && $row['password']== $pass && $row['usertype']==$set2)
 {
     $_SESSION["username"] = $_POST["username"];  
      $_SESSION['last_login_timestamp'] = time();  
     $_SESSION['username'] = $username;
    header('location:adminhome.php'); 
}}
        else
       {echo"<script>alert('not registered/approved')</script>";}
     ?>

I am using the ReactPHP event loop with periodic timer. The code works but the browser always shows that the activity is going on (the circle on the chrome tab is always running, refer the link to image below) and it runs only once.

Is it possible to get rid of the running circle and still the periodic loop should run in loop at given intervals to execute the code within the loop. Please advise.

Circle on the tab

Below is my code,

Note: **getAll($temp) is a function with parameter in another .php file. I have got the file as include in my current .php file.

$Loop=React\EventLoop\Factory::create(); $Loop->addPeriodicTimer(5, function(React\EventLoop\TimerInterface $timer) use(&$temp, $Loop, &$Total)

{

try{

$Total = getAll($temp);

echo"<script>document.getElementById('Overall').innerText=".$Total."</script>";

}catch (Exception $e){

echo "Error in Loop"; throw $e;

}

});

Basically I am submitting and retrieving data from a 3rd party's API. But every time I submit a form, it gives me this error.

Access to XMLHttpRequest at 'https://3rdpartywebsite.com/api' from origin 'https://mywebsite.com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

So I have been researching and there seems to be so many different answers. I have tried adding this code to the page but still get an error.

<?php
// ADD THIS CODE ON THE VERY TOP OF THE PAGE I AM SUBMITTING THE FORM.

header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Credentials: true");
header("Access-Control-Max-Age: 1000");
header("Access-Control-Allow-Headers: X-Requested-With, Content-Type, Origin, Cache-Control, Pragma, Authorization, Accept, Accept-Encoding");
header("Access-Control-Allow-Methods: PUT, POST, GET, OPTIONS, DELETE");
?>

I have also tried to add this to .htaccess file and still get the same error.

Header add Access-Control-Allow-Headers "origin, x-requested-with, content-type"
Header add Access-Control-Allow-Methods "PUT, GET, POST, DELETE, OPTIONS"

I was wondering what am I doing wrong? What's the correct way of implementing CORS to my site?