add first subproject for sql injection sample