diff --git a/acqui/neworderempty.pl b/acqui/neworderempty.pl
index 28a734add9..1ec08269f6 100755
--- a/acqui/neworderempty.pl
+++ b/acqui/neworderempty.pl
@@ -117,6 +117,7 @@ my $import_batch_id = $input->param('import_batch_id'); # if this is filled, we
 my $from_subscriptionid  = $input->param('from_subscriptionid');
 my $data;
 my $new = 'no';
+my $op = $input->param('op') || q{};
 
 our ( $template, $loggedinuser, $cookie, $userflags ) = get_template_and_user(
     {
@@ -173,7 +174,7 @@ if ( $ordernumber eq '' and defined $params->{'breedingid'}){
     my $duplicatetitle;
 #look for duplicates
     ($biblionumber,$duplicatetitle) = FindDuplicate($marcrecord);
-    if($biblionumber && !$input->param('use_external_source')) {
+    if($biblionumber && $op ne 'cud-use_external_source') {
         #if duplicate record found and user did not decide yet, first warn user
         #and let them choose between using a new record or an existing record
         Load_Duplicate($duplicatetitle);
diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/neworderempty_duplicate.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/neworderempty_duplicate.tt
index b3ceaee804..efddbbee1d 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/neworderempty_duplicate.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/neworderempty_duplicate.tt
@@ -67,13 +67,14 @@
 
 <div class="col-sm-4">
 <div style="border: 1px solid #DDD; padding:1em;">
-<form method="get" action="/cgi-bin/koha/acqui/neworderempty.pl">
+<form method="post" action="/cgi-bin/koha/acqui/neworderempty.pl">
+    [% INCLUDE 'csrf-token.inc' %]
 <h4>Create new record</h4>
 <p>Create a new record by importing the external (duplicate) record.</p>
 <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
 <input type="hidden" name="basketno" value="[% basketno | html %]" />
 <input type="hidden" name="breedingid" value="[% breedingid | html %]" />
-<input type="hidden" name="use_external_source" value="1" />
+<input type="hidden" name="op" value="cud-use_external_source" />
 <input type="submit" class="btn btn-primary" value="Create new" />
 </form>
 </div>