Rewrite SQL queries to conform to best practices

[niharikasingh]

Right now, the SQL queries for many files in the server/ folder use util.format to construct the query, e.g.,

toodope_open/server/evaluations.js

Line 14 in e7d4492

else queryString += util.format(" professor LIKE '%%%s%%' AND course LIKE '%%%s%%'", professor, course);

These queries need to be re-written to conform to best practices provided here https://node-postgres.com/features/queries#parameterized-query, e.g.,

toodope_open/server/search.js

Line 33 in e7d4492

var queryString = "SELECT doctype, hearts, docname, semester, year, grade, professorlast, random, $1=ANY(userhearts) AS thisuserheart";