diff --git a/lib/controller/checks.py b/lib/controller/checks.py index 09baa7cd1..b117a284c 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -768,7 +768,7 @@ def heuristicCheckSqlInjection(place, parameter): if casting: errMsg = "possible %s casting " % ("integer" if origValue.isdigit() else "type") - errMsg += "detected (e.g. $%s=intval($_REQUEST('%s'))) " % (parameter, parameter) + errMsg += "detected (e.g. \"$%s=intval($_REQUEST('%s'))\") " % (parameter, parameter) errMsg += "at the back-end web application" logger.error(errMsg)