Its great that the application automatically adds some SQL code but is it possible to see exactly what the SQL injection string would be like before sending it?
You only need to go over the row of the parameter you want to send with the mouse and after a second or two a Tooltip with the SQL injection string will be displayed. Take note that if you just modified a value in the parameter strings and the focus is still in the textbox you won’t see the change. What you need to do is to click anywhere else in the form and go over again with the mouse for a few seconds to see the change.
