FlexWin (Method 1)
- Parameters
FlexWin accepts the following parameters. Parameters marked [parameter] are optional. Parameters are sent, e.g., as hidden fields in a form:
Parameter | Type | Description |
| merchant | long | Shop identification. The Merchant number appears in the e-mail received from DIBS during registration with DIBS or on your contract. Your merchant number can also be retreived by contacting your respective DIBS support department below. Denmark Norway Sweden |
| amount | long - Minimum value of 1- maximum value 1715000000 | The smallest unit of an amount, eg. cent for EUR , øre for Danish crowns, Example: 1,00 EUR = 100 or 1,50 EUR =150 |
| accepturl | string. No max length | The URL of the page to be displayed if the purchase is approved. |
| orderId | String. Max 50 characters. Reg-ex format ^[a-zA-Z0-9\._-|]+$ | The shop’s order number for this particular puchase. It can be seen later when payment is captured, and will in some instances appear on the customer’s bank statement (both numerals and letters may be used). |
| currency | string. 3 digits or 3 letters | Currency specification as indicated in ISO4217 where the EUR is no. 978. Either the numeric or alphabetic code is accepted. Also see our list of currencies. |
| [voucher] | string | If set to "yes", then the list of payment types on the first page of FlexWin will contain vouchers, too. If FlexWin is called with a paytype, which would lead directly to the payment form, the customer is given the choice of entering a voucher code first. |
| [uniqueoid] | string. max 50 characters | If this field exists, the orderid-field must be unique, i.e. there is no existing transaction with DIBS with the same order number. If such a transaction already exists, payment will be rejected with reason=7. Unless you are unable to generate unique order numbers, we strongly urge you to utilize this field.Note: Order numbers can be composed of a maximum of 50 characters (DIBS automatically removes surplus characters) and that uniqueoid is therefore unable to work as intended if order numbers consisting of more than 50 characters are used. |
| [ticketrule] | string. Max 20 characters | Set the value of this parameter to the same as defined by you in DIBS Admin. |
| [test] | string. Max 10 characters | This field is used when tests are being conducted on the shop (e.g. test=yes). When this field is declared, the transaction is not dispatched to the card issuer, but is instead handled by the DIBS test module. See also Step 5 of the 10 Step Guide for more information. Should the test system be used at a later date, this will be activated at DIBS (contact DIBS support for reactivating the test mode of your shop). |
| [priceinfo1.. priceinfoN] | Complex order information. If both complex and simple order information is declared, the simple order information is ignored. This information is displayed in the Dibs administration interface. | |
| [preauth] | When preauth=true is sent as part of the request to auth.cgi the DIBS server identifies the authorisation as a ticket authorisation rather than a normal transaction. Please note that the pre-authorised transaction is NOT available among the transactions in the DIBS administration interface. When using MD5 the Authkey must be calculated from the string transact=12345678&preauth=true¤cy=123 You cannot use "capturenow" along with "preauth". | |
| [postype] |
"postype" (one 't') is used when one wishes to register the transaction origin. For normal internet transaction it is not required to include "postype", as it is automatically set to SSL. Possible values are:
ssl = internet transactions,
magnetic = magnetic stripe read, and signature is available,
magnosig = magnetic stripe read, and no signature is available,
mail = mail order,
manual = manually entered,
phone = phone order,
signature = card and signature available, manually entered.
| |
| [paytype] | string. max 30 characters | Used to show and control the shops selection of payment methods in Flexwin. This list must be comma separated with no spaces in between. Example: <input type="hidden" name="paytype" value="VISA,MC,AMEX,MTRO,ELEC" /> See our list of possible paytypes. |
| [ordline0-1.. ordlineN-M] | Complex order information, see Order information at DIBS. If both complex and simple order information [ordertext] is declared, the simple order information is ignored. This information is displayed in the Dibs administration interface. It is a requirement that the number of fields be identical in all lines of the order (eg. if there are four fields in the first line, the remaining lines must also contain four fields). | |
| [ordertext] | Simple order information sent to DIBS in one text string. This information is displayed in the Dibs administration interface. | |
| [md5key] | This variable enables a MD5 key control of the values received by DIBS. This control confirms that the values sent to DIBS has not been tampered with during the transfer. The MD5 key is calculated as:
MD5(key2 + MD5(key1 + "merchant=<merchant>&orderid=<orderid>¤cy= <currency>&amount= <amount>")) Where key1 and key2 are shop specific keys available through the DIBS administration interface, and + is the concatenation operator. NB! MD5 key check must also be enabled through the DIBS administration interface in order to work. Further details on MD5-key control. | |
| [maketicket] | string |
This parameter is intended for FlexWin, and actually performs two transactions. First it performs a regular authorisation. If, and only if, it is accepted, it is followed by a ticket registration.
Both a transaction and a ticket value are returned to "accepturl" if it is specified.
If "callbackurl" is specified, DIBS will perform two separate calls, corresponding to performing two transactions — one call to the regular authorisation, and another to the ticket registration. Both cases return a "transact" parameter value (e.g. transact="78901234"). In calls to "callbackurl" containing "preauth", the ticket value is composed of the "transact" parameter value.
"maketicket" implicitly sets the "preauth" parameter - however, you should avoid to explicitly specify any "preauth" parameter.
You cannot use "uniqueoid" , "MD5" or "capturenow" along with "maketicket".
|
| [lang] | string | This parameter determines the language in which the page will be opened. The following values are accepted: da=Danish en=English de=German es=Spanish fi=Finnish fo=Faroese fr=French it=Italian nl=Dutch no=Norwegian pl=Polish (simplified) sv=Swedish kl=Greenlandic Default language is Danish. |
| [ip] | DIBS retains the IP-number from which a card transaction is carried out. The IP-number is used for ’fraud control’, etc. Some implementations may send the IP number of the shop to DIBS rather than that of the customer's machine. In order to provide the same services to shops which utilize such a program for their DIBS hookup, we offer the option of sending the “ip” parameter. | |
| [delivery1..deliveryN] | Complex order information. If both simple and complex order information (ordertext) is declared, the simple order information is then ignored. This information is displayed to the customer in the payment window and is stored at DIBS. | |
| [decorator] | Specifies which DIBS decorator to use. Possible values are "default", "basal" and "rich". This will override the customer specific decorator, if one has been uploaded. | |
| [capturenow] | If this field exists, an "instant capture" is carried out, i.e. the amount is immediately transferred from the customer’s account to the shop’s account. This function can only be utilized in the event that there is no actual physical delivery of any items. Contact DIBS when using this function. (Note that instant capture requires unique order numbers – also see the description of uniqueoid above). | |
| [cancelurl] | string. No max length | The URL of the page to be displayed if the customer cancels the payment. |
| [callbackurl] | string. No max length | An optional ”server-to-server” call which tells the shop’s server that payment was a success. Can be used for many purposes, the most important of these being the ability to register the order in your own system without depending on the customer’s browser hitting a specific page of the shop. See also HTTP_COOKIE. |
| [calcfee] | If this parameter is set (e.g. calcfee=foo), the charge due to the transaction will automatically be calculated and affixed, i.e., the charge payable to the acquirer (e.g. PBS) | |
| [account] | String. A comma separated list of payment type short names. Reg-ex format: " ^[a-zA-Z0-9(),_-]+$" | If multiple departments utilize the company’s acquirer agreement with the acquirer, it may prove practical to keep the transactions separate at DIBS. An ”account number” may be inserted in this field, so as to separate transactions at DIBS. |
| [HTTP_COOKIE] | Cookies/sessions which are to be sent to callbackurl. Must be sent along if you are using callbackurl and depend on cookies/sessions for keeping track of the user. |