* Hints added

* Solutions added
* Bugfixes
* Introduction added (including how to start with webgoat and useful tools)
* New lesson: Password strength
* New lessons: Multi Level Login
* Not yet working new lesson: Session fixation (inital release)

git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@301 4033779f-a91e-0410-96ef-6bf7bf53c507

main/project/JavaSource/org/owasp/webgoat/lessons/SqlNumericInjection.java

@@ -303,12 +303,13 @@ public class SqlNumericInjection extends SequentialLessonAdapter
 	protected List<String> getHints(WebSession s)
 	{
 		List<String> hints = new ArrayList<String>();
-		hints.add("The application is taking your input and inserting it at the end of a pre-formed SQL command.");
+		hints.add("The application is taking the input from the select box and inserts it at the end of a pre-formed SQL command.");
 		hints.add("This is the code for the query being built and issued by WebGoat:<br><br> "
 				+ "\"SELECT * FROM weather_data WHERE station = \" + station ");
 		hints.add("Compound SQL statements can be made by joining multiple tests with keywords like AND and OR. "
 				+ "Try appending a SQL statement that always resolves to true.");
-		hints.add("Try entering [ 101 OR 1 = 1 ].");
+		hints.add("Try to intercept the post request with WebScarab and replace the station " +
+				"with 101 OR 1 = 1");
 
 		return hints;
 	}