diff --git a/modules/metasploit/browser_autopwn/command.js b/modules/metasploit/browser_autopwn/command.js
index 6caa6fd60..81ecaa566 100644
--- a/modules/metasploit/browser_autopwn/command.js
+++ b/modules/metasploit/browser_autopwn/command.js
@@ -5,7 +5,7 @@
 //
 
 beef.execute(function() {
-	url = '<%= @sploit_url %>';
+	var url = '<%= @sploit_url %>';
 	if (!/https?:\/\//i.test(url)) {
 		beef.net.send("<%= @command_url %>", <%= @command_id %>, "error=invalid url");
 		return;