diff --git a/lib/controller/checks.py b/lib/controller/checks.py index 7d8243e10..3e647b633 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -779,7 +779,7 @@ def heuristicCheckSqlInjection(place, parameter): if casting: errMsg = "possible %s casting " % ("integer" if origValue.isdigit() else "type") - errMsg += "detected (e.g. \"$%s=intval($_REQUEST('%s'))\") " % (parameter, parameter) + errMsg += "detected (e.g. \"$%s=intval($_REQUEST['%s'])\") " % (parameter, parameter) errMsg += "at the back-end web application" logger.error(errMsg)