Offerwall Link and iFrame

Link format

Every approved app has its own link. You find it, ready to copy, in your dashboard under Apps, your app, Integration.

https://wall.sharklio.com/{APP_ID}?user_id={USER_ID}&hash={HASH}

Link security is on by default. You can turn it off in the Integration tab, but we do not recommend it.

Build the hash on your server

The link hash salt is a secret. Build the hash on your server and send only the finished link to the browser. Never put the salt in JavaScript or in an app bundle.

PHP:

$hash = hash_hmac('sha256', $userId, $linkHashSalt);
$url  = 'https://wall.sharklio.com/' . $appId . '?user_id=' . rawurlencode($userId) . '&hash=' . $hash;

Node.js:

const crypto = require('crypto');
const hash = crypto.createHmac('sha256', linkHashSalt).update(String(userId)).digest('hex');
const url = `https://wall.sharklio.com/${appId}?user_id=${encodeURIComponent(userId)}&hash=${hash}`;

Python:

import hmac, hashlib
from urllib.parse import quote
hash = hmac.new(link_hash_salt.encode(), str(user_id).encode(), hashlib.sha256).hexdigest()
url = f"https://wall.sharklio.com/{app_id}?user_id={quote(str(user_id))}&hash={hash}"

The Integration tab has a Test a link tool: type a user ID and it shows the exact link your server should build.

Embed with an iframe

<iframe title="Offerwall" src="https://wall.sharklio.com/{APP_ID}?user_id={USER_ID}&amp;hash={HASH}"
  width="100%" height="800" style="border:0" allow="clipboard-write"
  referrerpolicy="strict-origin-when-cross-origin"></iframe>

For safety, the offerwall only loads inside frames on the website you registered for the app and its subdomains. Opening the link directly in a tab, a new window, or a mobile WebView works everywhere.

Mobile apps

Open the link in a WebView or in the system browser. Build the link on your backend and pass it to the app, so the salt stays on your server.

What your users see

• Earn: the offers available for their country and device, with search, categories, a device filter, and sorting.
• Reward status: offers they started (In progress), finished (Completed, with Credited, Pending, Rejected, or Reversed), and let run out (Expired).
• Links to our Terms of Service and Privacy Policy, and their user ID for support questions.

Error pages