From 4322b97fe2a2006d7eb3f073ef7cf5437e16f67a Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Mon, 20 Sep 2021 16:40:30 +0200
Subject: [PATCH] better checking of quota when set by setQuota()

---
 SeedDMS_Core/Core/inc.ClassUser.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/SeedDMS_Core/Core/inc.ClassUser.php b/SeedDMS_Core/Core/inc.ClassUser.php
index 4d1ba803e..8782ef0f1 100644
--- a/SeedDMS_Core/Core/inc.ClassUser.php
+++ b/SeedDMS_Core/Core/inc.ClassUser.php
@@ -620,6 +620,11 @@ class SeedDMS_Core_User { /* {{{ */
 	 * @return bool
 	 */
 	function setQuota($quota) { /* {{{ */
+		if (!is_numeric($quota))
+			return false;
+		if($quota < 0)
+			return false;
+
 		$db = $this->_dms->getDB();
 
 		$quota = intval($quota);