Direct Access to payment.php is not allowed.