Usage of String q and s

Your API received the q and s parameters should decode the q and verify it’s md5 with the s. If the verification passed, the client should check against their own system.  If the username exists in your platform, you should call SA Gaming API “LoginRequest” to receive a login token for the user. If the user doesn’t exist in our platform, we will create one. If LoginRequest success, you should receive an XML for the result with the token. Please refer to “SA Gaming Web Service API – Technical Guide” for details.