From e976dbe10f4a0f62525b671db6d9ffa1d1fbb1e4 Mon Sep 17 00:00:00 2001
From: PhilippeSteinbach <steinbach.phil@gmail.com>
Date: Mon, 4 Feb 2019 14:28:21 +0100
Subject: [PATCH] assignment 4: display query string to user after success

---
 .../webgoat/plugin/introduction/SqlInjectionLesson4.java      | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson4.java b/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson4.java
index efd64626a..6488b8104 100644
--- a/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson4.java
+++ b/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson4.java
@@ -72,8 +72,8 @@ public class SqlInjectionLesson4 extends AssignmentEndpoint {
                 StringBuffer output = new StringBuffer();
                 // user completes lesson if column phone exists
                 if (_results.first()) {
-                    output.append(SqlInjectionLesson8.generateTable(_results));
-                    return trackProgress(success().feedbackArgs(output.toString()).build());
+                    output.append("<span class='feedback-positive'>" + _query + "</span>");
+                    return trackProgress(success().output(output.toString()).build());
                 } else {
                     return trackProgress(failed().output(output.toString()).build());
                 }