Hmm, djr33 is right about the headers. What's puzzling me is I don't see anything actually being echoed before that?
And...that isn't good. The solution for the redirection at the right time is to move the actual script to a different page and have the form submit to that different page. Make sense?
The other thing I was wondering, even though a bit off topic, is how secure you're making this? Any encryption/secure server? People aren't going to want to send their credit card info online if there's no security, and for good reason.
Thou com'st in such a questionable shape
Hamlet, Act 1, Scene 4
Bookmarks