add second sub prj for sql injection