A XBlock for SQLInjection lab