FUNDISHA.SITE v28 — CONFIGURABLE SONICPESA AMOUNT + PAYMENT VERIFICATION

1) Upload the CONTENTS of this folder into public_html.
2) Open config.php on the server.
3) Put your SonicPesa API key here:
   const SONICPESA_API_KEY = 'YOUR_REAL_KEY';
4) If your provider gave you an access key, put it in:
   const SONICPESA_ACCESS_KEY = 'YOUR_ACCESS_KEY';
   (The current integration sends the documented X-API-KEY header; do not invent extra headers unless your provider documents them.)
5) Set ONE payment amount in config.php:
   const SONICPESA_PAYMENT_AMOUNT = 200;
   Change it to 300, 400, 500, etc. whenever you want.

IMPORTANT:
- The browser NEVER decides the amount. payment_create.php ignores any amount sent by the browser and reads SONICPESA_PAYMENT_AMOUNT from config.php.
- The frontend reads the public amount from /api/payment_config.php, so the displayed amount follows config.php.
- A countdown is created ONLY after payment_status.php receives a verified SUCCESS for the server-stored order.
- The status endpoint does not accept arbitrary order IDs; it requires a random server-created client token tied to that transaction.
- Provider SUCCESS is additionally checked against the configured amount before the success receipt is issued.
- Transaction records are stored under /storage and protected from web access. Keep the folder writable by PHP.
- Do not put API keys in config.js, index.html, or script.js.
- Do not send API keys in chat.

Hosting requirements:
- PHP 8+ recommended
- PHP cURL enabled
- HTTPS enabled
- The storage directory must be writable by PHP
