Server rentals :: NFOservers.com

So I'm in need of preventing SQL injections on my website because someone has found a vulnerability. I have been looking around for prevention methods and found one using mysql_real_escape_string. Although I'm not sure where/how to use it. Could someone help me with that or give me other methods for...