diff --git a/security/index.xml b/security/index.xml
index 6e1628d44f..fd2324feaa 100644
--- a/security/index.xml
+++ b/security/index.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
-<!-- $Revision: 1.60 $ -->
+<!-- $Revision: 1.61 $ -->
  <chapter id="security.index">
   <title>Security</title>
 
@@ -947,7 +947,7 @@ $query = sprintf("SELECT id, name FROM products ORDER BY name LIMIT 20 OFFSET %d
      <title>Exploiting common debugging variables</title>
      <programlisting role="php">
 <![CDATA[
-<form method="POST" action="attacktarget?errors=Y&amp;showerrors=1&debug=1">
+<form method="POST" action="attacktarget?errors=Y&amp;showerrors=1&amp;debug=1">
 <input type="hidden" name="errors" value="Y">
 <input type="hidden" name="showerrors" value="1">
 <input type="hidden" name="debug" value="1">