Developer Documentation · v2.4

FarLox Developer Docs

Integrate the FarLox offerwall into your application with secure offerwall URLs, iframe embeds, real-time postback tracking, and a clean conversion API built for performance marketers.

Updated 2026 v2.4 Stable HTTPS Required Real-time Postbacks
99.99%
Uptime
<80ms
Postback
14+
Macros
200+
Countries

Offerwall Integration

Use the following URL format to integrate the FarLox offerwall into your website or mobile application. Both parameters are required.

URL
https://farlox.com/offerwall.php?placement_id=YOUR_PLACEMRNT&user_id=USER_123
ParameterDescriptionExample
placement_idYour placement ID12
user_idYour unique user identifierUSER_123

Iframe Integration

Embed the FarLox offerwall inside your platform using a standard iframe integration. The frame is fully responsive.

HTML
<iframe
  src="https://farlox.com/offerwall.php?placement_id=YOUR_PLACEMRNT&user_id=USER_123"
  width="100%"
  height="800"
  frameborder="0"
></iframe>
OptionDescription
width="100%"Responsive full width
height="800"Offerwall frame height
border:noneRemoves iframe border

Postback Setup Guide

Use these macros in your Postback URL to receive conversion data in real time. FarLox replaces each macro with the corresponding value at fire time.

Postback URL
https://yourwebsite.com/postback.php?subId={subId}&transId={transId}&reward={reward}&payout={payout}&signature={signature}&status={status}&offer_id={offer_id}&offer_name={offer_name}&round_reward={round_reward}&userIp={userIp}&country={country}&uuid={uuid}&event_id={event_id}&event_name={event_name}
ParameterTypeDescription
subIdstringYour user's unique identifier (the one you passed as USER_ID).
transIdstringUnique transaction ID — use for deduplication.
rewardnumberAmount of virtual currency to credit.
payoutnumberOffer payout in USD.
signaturestringMD5 hash for verification (see below).
statusinteger1 = credit · 2 = chargeback (subtract).
offer_idstringCompleted offer ID.
offer_namestringCompleted offer name.
round_rewardnumberReward rounded to your site's decimal setting.
userIpstringUser's IP address.
countrystringISO 2-letter country code.
uuidstringUnique click ID.
event_idstringEvent ID (multi-reward offers only).
event_namestringEvent name (multi-reward offers only).

Signature Verification

Always verify the signature before applying the reward or chargeback. This protects your endpoint from spoofed requests. The formula is:

Formula
md5(subId + transId + reward + SECRET_KEY)

Example PHP implementation that verifies the signature, deduplicates by transId, then credits or debits the user based on status.

postback.php
<?php
// Verify a FarLox postback before crediting the user

$expected = md5($_GET['subId'] . $_GET['transId'] . $_GET['reward'] . SECRET_KEY);

if (!hash_equals($expected, $_GET['signature'])) {
    http_response_code(403);
    exit('Invalid signature');
}

// Deduplicate by transId
if (transactionExists($_GET['transId'])) {
    exit('OK'); // already handled
}

if ($_GET['status'] == 1) {
    creditUser($_GET['subId'], $_GET['reward']);
} elseif ($_GET['status'] == 2) {
    debitUser($_GET['subId'], $_GET['reward']); // chargeback
}

echo 'OK';

Response requirement

  • Always respond with HTTP 200 and a short body (e.g. OK) once handled.
  • Non-200 responses trigger automatic retries from our Action Center.

Response Examples

Example JSON responses your server should return after processing a postback request.

JSON · Success
{
  "success": true,
  "message": "Reward added successfully"
}
JSON · Error
{
  "success": false,
  "message": "Duplicate transaction"
}

Best Practices

Follow these recommendations to keep your integration secure, reliable, and ready for production traffic.

Recommended Integration Tips

  • Always validate postbacks server-side
  • Prevent duplicate transaction IDs
  • Use HTTPS only
  • Store conversion logs
  • Validate payout amounts
  • Avoid iframe inside iframe
  • Use responsive layouts for mobile users
Copied to clipboard