how to prevent SQL injection?

[markman641]

My site is FILLED with <form>'s. I think it may be very SQL injectable.

What is the easiest way to prevent this?

[guelphdad]

Did you search for an answer before posting?
Can you tell us what scripting language? For instance if you are using php then mysql_real_escape_string is one answer, using PDO is another.

[felgall]

PDO is the better of those solutions as it keeps the SQL and data completely separate making injection impossible.