Added hint about extra "." in http://localhost./

git-svn-id: http://webgoat.googlecode.com/svn/trunk@267 4033779f-a91e-0410-96ef-6bf7bf53c507
2008-01-10 17:39:07 +00:00 · 2008-01-10 17:39:07 +00:00 · b7156e12da
commit b7156e12da
parent 36ca8e5598
1 changed files with 2 additions and 1 deletions
--- a/webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/Phishing.java
+++ b/webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/Phishing.java
@ -223,7 +223,8 @@ public class Phishing extends LessonAdapter
 					 + "&gt;&lt;br&gt;&lt;br&gt;Enter Username:&lt;br&gt;&lt;input type=&quot;text&quot; id=&quot;user&quot; "
 					 + "name=&quot;user&quot;&gt;&lt;br&gt;Enter Password:&lt;br&gt;&lt;input type=&quot;password&quot; "
 					 + "name = &quot;pass&quot;&gt;&lt;br&gt;&lt;input type=&quot;submit&quot; name=&quot;login&quot; "
-					 + "value=&quot;login&quot; onclick=&quot;hack()&quot;&gt;&lt;/form&gt;&lt;br&gt;&lt;br&gt;&lt;HR&gt;");
+					 + "value=&quot;login&quot; onclick=&quot;hack()&quot;&gt;&lt;/form&gt;&lt;br&gt;&lt;br&gt;&lt;HR&gt;"
+					 + "<BR><BR>You may need to remove the '.' from the http://localhost./");
 		/**
 		 * password<script>function hack(){ alert("Had this been a real
 		 * attack... Your credentials were just stolen.\nUser Name = " +