How to building Filter to detecting and block SQL injection for Webserver

Please give me something book or anything about it <3 thank you so much

1. how to create a TCP proxy to capture packets sent from the web server to the database server?

2. extract packet data to -> SQL statements

3. Build a filter based on the analysis of the SQL statement. If valid, the implementation, if not valid, cancellation and message.