Member Avatar for sigitas.darguzas

Hi. all im new in php i need create postback file for siperrevards. what can help me. i use av arcade site :)

  • 2 Contributors
  • 3 Replies
  • 185 Views
  • 15 Hours Discussion Span
  • Latest Post Latest Post by Member #120589

Dani AI

Generated

This note gives a compact checklist and a minimal PHP template for wiring a SuperRewards-style postback into an AV Arcade site. It fills gaps left in the thread: reports inability to install SuperRewards, and asked for a link or example. The goal is a reachable URL that validates the provider callback, avoids double-crediting, and returns exactly what the offer network expects.

Checklist (typical causes of “postback not working”)

  • Postback URL: must be public, use the exact protocol (http vs https) and path configured in the provider panel. No redirects.
  • Credentials/secret: copy the shared secret/key exactly as given by the offer network. Matching case matters.
  • Parameter mapping: map provider fields to AV Arcade fields (user id, transaction id, reward amount). Decide which provider param identifies the user and which is the unique transaction id.
  • Validation: validate whatever signature/hash the provider sends. Do not assume the algorithm — confirm in the provider docs.
  • Idempotency: check transaction id before crediting to avoid duplicates.
  • Response & status: return the exact plain-text response expected (often "OK" or "1") and HTTP 200. No HTML, no extra whitespace or BOM.
  • Logging: log timestamp, raw request body, headers, remote IP, and the script response for every callback.
  • Testing: use a sandbox (if available) or curl to replay test callbacks from a different host.

Minimal PHP template (adjust param names and hash algo to provider docs):

<?php
// postback.php - template. Replace param names and algorithm per provider docs.
$secret = 'YOUR_SHARED_SECRET';
$params = $_POST ?: $_GET;
$tx = isset($params['transaction_id']) ? $params['transaction_id'] : '';
$user = isset($params['user_id']) ? $params['user_id'] : '';
$amount = isset($params['amount']) ? (int)$params['amount'] : 0;

// Example HMAC check (replace 'signature' and 'sha256' as required)
$sig = isset($params['signature']) ? $params['signature'] : '';
$calc = hash_hmac('sha256', http_build_query($params), $secret);
if (!hash_equals($calc, $sig)) { http_response_code(400); echo 'Invalid'; exit; }

// Idempotency check: ensure $tx not in local transactions, then credit and insert tx
echo 'OK';

Troubleshooting notes

  • Capture server access and error logs immediately after a failed attempt to see whether the provider actually reached the URL.
  • Watch for common hosting issues: firewalls, IP whitelisting, auto-redirects to index pages, and UTF-8 BOM on PHP files.
  • Prefer AV Arcade’s built-in offers/crediting hooks when available; when doing manual integration, update the same tables and follow the same transaction workflow the core uses.

Recommended Answers

All 3 Replies

Member Avatar for sigitas.darguzas

I use AV ARCADE PAGE SCRIPT. and i try install superrevards but i cant and i dont know why.

Member Avatar for Member #120589

Could you provide a link to the script or post some code? Make your thread as easy as possible for contributors to be able to respond.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.