diff --git a/webshop/templates/pages/order.html b/webshop/templates/pages/order.html
index 2e11784b91..6af149d54d 100644
--- a/webshop/templates/pages/order.html
+++ b/webshop/templates/pages/order.html
@@ -36,14 +36,18 @@ <h3 class="m-0">{{ doc.name }}</h3>
 		</div>
 		<div class="form-column col-sm-6">
 			<div class="page-header-actions-block" data-html-block="header-actions">
-				<p>
-					{% if enabled_checkout and (doc.doctype != "Sales Invoice" or doc.outstanding_amount > 0) %}
-					<a href="/api/method/erpnext.accounts.doctype.payment_request.payment_request.make_payment_request?dn={{ doc.name }}&dt={{ doc.doctype }}&submit_doc=1&order_type=Shopping Cart"
-						class="btn btn-primary btn-sm" id="pay-for-order">
-						{{ _("Pay") }} {{doc.get_formatted("grand_total") }}
-					</a>
-					{% endif %}
-				</p>
+				{% if enabled_checkout and show_pay_button %}
+				<form method="post" action="/api/method/erpnext.accounts.doctype.payment_request.payment_request.make_payment_request">
+					<input type="hidden" name="csrf_token" value="{{ csrf_token | e }}">
+					<input type="hidden" name="dn" value="{{ doc.name | e }}">
+					<input type="hidden" name="dt" value="{{ doc.doctype | e }}">
+					<input type="hidden" name="submit_doc" value="1">
+					<input type="hidden" name="order_type" value="Shopping Cart">
+					<button type="submit" class="btn btn-primary btn-sm" id="pay-for-order">
+						{{ _("Pay") }} {{ frappe.utils.fmt_money(pay_amount, currency=doc.currency) }}
+					</button>
+				</form>
+				{% endif %}
 			</div>
 		</div>
 	</div>
diff --git a/webshop/templates/pages/order.py b/webshop/templates/pages/order.py
index c97f3eaa62..7da78c4cf4 100644
--- a/webshop/templates/pages/order.py
+++ b/webshop/templates/pages/order.py
@@ -2,7 +2,9 @@
 # License: GNU General Public License v3. See license.txt
 
 import frappe
+from erpnext.templates.pages.order import get_payment_details
 from frappe import _
+from frappe.sessions import get_csrf_token
 
 from webshop.webshop.doctype.webshop_settings.webshop_settings import show_attachments
 
@@ -38,6 +40,10 @@ def get_context(context):
 	if not frappe.has_website_permission(context.doc):
 		frappe.throw(_("Not Permitted"), frappe.PermissionError)
 
+	context.show_pay_button, context.pay_amount = get_payment_details(context.doc)
+	if context.enabled_checkout and context.show_pay_button:
+		context.csrf_token = get_csrf_token()
+
 	if context.doc.get("customer"):
 		# check for the loyalty program of the customer
 		customer_loyalty_program = frappe.db.get_value("Customer", context.doc.customer, "loyalty_program")