Skip to main content
Version: 4.0.4

Hosted Payment Page

The Hosted Payment Page (HPP) is a low-code, software-as-a-service (SaaS) payment page. It lets merchants take payments with the DMG E-Commerce SDK without building their own payment form. It suits merchants who need little design customisation and a simple integration.

The Merchant Dashboard has more configuration options. Contact DMG for access.

Webhooks tell the merchant's system about each payment, for example whether it succeeded. Webhooks are created in Mentor. The merchant can receive every stage of the payment or only the stages they choose, and sets this up in the Merchant Dashboard.

Solutions​

To take a payment, the merchant gives the payer a payment link. There are four options:

  • Hosted Payment Page (HPP)
  • Static Payment Links
  • Secure Links
  • API-Driven Secure Links

Hosted Payment Page​

The Hosted Payment Page is a payment page that the merchant can brand. Each page has a form, and the merchant chooses which fields it shows.

Static Payment Links send payers to a form with common fields and values. The form collects the details the merchant needs, such as an invoice number. Many payers can use the same link, so merchants can print it as a QR code and share it. Static Payment Links suit payments that do not need to be private or checked.

For more information, see Static Payment Links.

A secure link is a payment link that carries the payment details, such as the amount and invoice number. When the payer opens the link, the HPP shows the payment form with those details already filled in. The merchant can email the link to the payer or put it on an invoice as a QR code.

The merchant creates each link on their own system. The Secure Links guide includes a helper script that does this. The link is encrypted, so only DMG can read the details, and signed with the merchant private key, so DMG knows the merchant created it.

Before creating the first link, the merchant makes a merchant key pair and sends the merchant public key to DMG. DMG registers it with an expiry date. A link signed with an expired key does not open.

Use Secure Links when the payment details must stay private and the payer must not change them.

For more information, see Secure Links.

API-Driven Secure Links are Secure Links that the Secure Links API creates for the merchant. DMG recommends the API over creating links on the merchant's own system. The merchant sends an encrypted, signed payload to the Secure Links API, and the API returns the link or a QR code image. The API checks the signature, the key and the payload before it returns the link.

For more information, see API-Driven Secure Links.