-if ( $cgi->param('invnum') ) {
- $templatename = $cgi->param('templatename');
- my $cust_bill = qsearchs('cust_bill', { 'invnum' => $cgi->param('invnum') } )
- or die 'unknown invnum';
+if ( $cgi->param('invnum') =~ /^(\d+)$/ ) {
+ my $invnum = $1;
+ $templatename = $cgi->param('template') || $cgi->param('templatename');
+ my $cust_bill = FS::cust_bill->by_key($invnum)
+ || FS::cust_bill_void->by_key($invnum)
+ || die 'unknown invnum';
+ $conf = $cust_bill->conf;