%if ( $error ) { % $cgi->param('error', $error); <% $cgi->redirect(popurl(2). "void-cust_bill.html?". $cgi->query_string ) %> %} else { <& /elements/header-popup.html, 'Invoice voided' &> %} <%init> die "access denied" unless $FS::CurrentUser::CurrentUser->access_right('Void invoices'); #untaint invnum $cgi->param('invnum') =~ /^(\d+)$/ || die "Illegal invnum"; my $invnum = $1; my $cust_bill = qsearchs('cust_bill',{'invnum'=>$invnum}); my $error = $cust_bill->void( scalar($cgi->param('reason')), scalar($cgi->param('reprocess_cdrs')), );