Verify a shortlink completion with a signed return token
Providers do not postback, so the round trip is the only evidence. Single use, account bound, expiring, minimum dwell, and starting a new run kills the old one.
Tagged “verification”
4 entries
Checking an AdsLab captcha solve
session-info answers pending for any token, including invented ones, so only the solved check means anything.
Verify an AdsLab postback signature
It is sha256 of the transaction id, a hyphen and your Security Hash — not the Publisher API key their integration page names.
Verify that someone owns the site they registered
Fetch the page, look for your token in a meta tag, and only let verified sites earn. The empty-needle bug in this check is worth knowing about before it bites you.