From 68a1500ea6626c0d887aeb9fc18f78f7711e2b36 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Sat, 2 Oct 2021 07:32:49 +0200
Subject: [PATCH] check if date passed to setStatus() is valid

---
 SeedDMS_Core/Core/inc.ClassDocument.php | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/SeedDMS_Core/Core/inc.ClassDocument.php b/SeedDMS_Core/Core/inc.ClassDocument.php
index 738b2ae5d..bfe9ace50 100644
--- a/SeedDMS_Core/Core/inc.ClassDocument.php
+++ b/SeedDMS_Core/Core/inc.ClassDocument.php
@@ -3308,9 +3308,11 @@ class SeedDMS_Core_DocumentContent extends SeedDMS_Core_Object { /* {{{ */
 		if ($this->_status["status"]==$status) {
 			return true;
 		}
-		if($date)
+		if($date) {
+			if(!SeedDMS_Core_DMS::checkDate($date, 'Y-m-d H:i:s'))
+				return false;
 			$ddate = $db->qstr($date);
-		else
+		} else
 			$ddate = $db->getCurrentDatetime();
 		$db->startTransaction();
 		$queryStr = "INSERT INTO `tblDocumentStatusLog` (`statusID`, `status`, `comment`, `date`, `userID`) ".