Need to parameterize sql statements in website that uses PHP

Hello all. I have a Sports website that is written in HTML with a bootstrapper front end utilizing an MS SQL database. I have SQL queries that need to be parameterized Inside this website that is a combination HTML and PHP. Don't know how to do this myself, there's only a very small handful of tables where the queries need to be parameterized. For someone with the proper knowledge and experience, this should be simple: a walk in the park for you. My current site is subject and quite often hit with aggravating sql injection attacks. Need help ASAP! Thanks!