diff --git a/nselib/data/http-default-accounts-fingerprints.lua b/nselib/data/http-default-accounts-fingerprints.lua
index d294128e6..cba72ad33 100644
--- a/nselib/data/http-default-accounts-fingerprints.lua
+++ b/nselib/data/http-default-accounts-fingerprints.lua
@@ -298,7 +298,7 @@ table.insert(fingerprints, {
                     local _, hex = bin.unpack("H" .. str:len(), str)
                     return hex:lower()
                   end
-    local login = string.format("J20K34NMMT89XPIJ34S login %s %s", tohex(user), tohex(pass))
+    local login = ("J20K34NMMT89XPIJ34S login %s %s"):format(tohex(user), tohex(pass))
     local lpath = url.absolute(path, "usmCgi.cgi/?" .. url.escape(login))
     local req = http.get(host, port, lpath, {no_cache=true, redirect_ok = false})
     return req
diff --git a/nselib/data/http-devframework-fingerprints.lua b/nselib/data/http-devframework-fingerprints.lua
index 942184799..34f09d1df 100644
--- a/nselib/data/http-devframework-fingerprints.lua
+++ b/nselib/data/http-devframework-fingerprints.lua
@@ -367,13 +367,13 @@ tools = { Django = { rapidDetect = function(host, port)
       local response = http.get(host, port, "/")
 
       if response and response.status == 200 then
-          header_composed_by = response.header['composed-by']
+          local header_composed_by = response.header['composed-by']
           -- Check in Composed-by header for the version
           if header_composed_by ~= nil then
-              version = string.match(header_composed_by, ('SPIP ((%d+)%.(%d+)%.(%d+))'))
-          end
-          if version ~= nil then
-              return "Version of the SPIP install is " .. version
+              local version = string.match(header_composed_by, ('SPIP (%d+%.%d+%.%d+)'))
+              if version ~= nil then
+                return "Version of the SPIP install is " .. version
+              end
           end
       end
     end,