You were getting the url for confirm payment from a recordset and the urls for success and failed payments were encoded. I updated confirm.php lines 123 and 126 to remove the automatic encoding so that the url could be retrieved from the recordset.
I also removed the pay with credit card code while I was in there for you.