From 18666a8cfb0bafa231c895dd453d3d649b27633b Mon Sep 17 00:00:00 2001
From: Stefan Schantl <stefan.schantl@ipfire.org>
Date: Thu, 1 Apr 2021 15:48:44 +0200
Subject: [PATCH] ids.cgi: Prevent from chainging the provider when editing an
 existing one.

This commit locks the dropdown menu for selecting a provider, in case
an existing one should be edited.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
---
 html/cgi-bin/ids.cgi | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/html/cgi-bin/ids.cgi b/html/cgi-bin/ids.cgi
index c13a4874c3..ec92c0f967 100644
--- a/html/cgi-bin/ids.cgi
+++ b/html/cgi-bin/ids.cgi
@@ -1621,9 +1621,21 @@ print <<END
 			<tr>
 				<td width='40%'>
 					<input type='hidden' name='ID' value='$cgiparams{'ID'}'>
-					<select name='PROVIDER' id='PROVIDER'>
 END
 ;
+					# Value to allow disabling the dropdown menu.
+					my $disabled;
+
+					# Check if we are in edit mode.
+					if ($cgiparams{'PROVIDERS'} eq "$Lang::tr{'edit'}") {
+						$disabled = "disabled";
+
+						# Add hidden input with the provider because the disable select does not provider
+						# this.
+						print "<input type='hidden' name='PROVIDER' value='$used_providers{$cgiparams{'ID'}}[0]'>\n";
+					}
+
+					print "<select name='PROVIDER' id='PROVIDER' $disabled>\n";
 						# Loop through the array of ruleset providers.
 						foreach my $provider (@ruleset_providers) {
 							# Get the provider name.
-- 
2.39.5