Secure against sql injection

I run a small niche social networking site. It has been attacked several times with sql injection. Everytime database gets cleaned, within 24 hours it gets attacked again. I need an expert who knows about securing sites against these attacks. To my knowledge, the attacks are happening through the sites text boxes. So basically all text boxes must be secure to prevent this from happening.