Skip to main content
The card capture and CVV capture forms redirect the cardholder to your pages after submission. You provide a success URL and a failure URL. PCI Booking redirects to the appropriate page based on the outcome. These parameters are accepted on Request Card Entry Form, Send Card Capture Link, Request CVV Entry Form, and Send CVV Capture Link.

​
Success Page

Your success URL receives non-sensitive card capture data as query string parameters. Build your URL with placeholders for the parameters you need, and PCI Booking replaces them with actual values on redirect.

​
Available Parameters

​
Example

Include only the parameters you need. At minimum, include {cardToken} to receive the token for subsequent API calls.
Submit all URLs in encoded format. URLs must use HTTPS - an HTTP success/failure/postMessageHost URL causes mixed-content issues in the cardholder’s browser since the form itself is served over HTTPS.
If your success/failure URL resolves to a private/local network address from the cardholder’s browser, Chrome’s Private Network Access policy can block the redirect entirely. See Chrome Private Network Access for the fix (switch to the postMessage-based result flow).

​
Failure Page

The failure URL is a static URL. You do not need to add placeholders. PCI Booking automatically appends query parameters with the failure details.

​
Parameters Appended by PCI Booking

​
Example: What You Configure

​
Example: What the Redirect Looks Like

After a failed card capture:
After a failed charge-on-capture (with UPG gateway details):

​
Next Steps

Hosted Card Entry Form

Card capture form that uses these redirect URLs

CVV Capture

CVV-only capture form that uses the same redirect mechanism