QUANTUM PAY WEBSITE - EXPIRED ORDER FIX

Upload the contents of this ZIP to your existing website document root, preserving folders.
Backup your current website first. Keep your existing config.php/database credentials.

Fix included:
- api/order_status.php now marks a pending order expired BEFORE provider verification when expires_at has passed.
- A late provider response cannot turn an already expired local pending order into success through this status endpoint.
- payment.php and payment_status.php already mark expired pending orders based on database time and are included unchanged.

Important:
- This does not cancel a transfer in a UPI app or refund a payment already sent.
- Test with a newly created low-value order. If a payment was actually received after expiry, review it manually; do not assume money was reversed.
