API which is vulnerable to SQL injection. For educational purposes. /appointments/{int}