How do I write a custom middleware function for securing API endpoints against SQL injection in a React and Express web application