I want to create a filter to protect against SQL injection attacks. as the below image

I want to know how we can interpret the HTTP request in the middle of the client and server and after capturing the request if any request finds malicious I want to block the request.