How do I prevent an SQL Injection Attack?

I posted a problem on here the other day when another member mentioned to me that my code was vulnerable to a SQL injection attack.  I am a beginner, but am trying to learn quickly. 

Can I prevent the SQL injection attack by simply by requiring all password to be between 8 and 16 characters with upper case letters, lower case letters, and numbers?

Thanks in advance.
...