If your site is critical, and you (or your company) can afford it, hire a professional pen tester, Or you should use some kind of tools for
sql injection defense test, because it can help you a lot in testing and protecting your websites from any these kind of problems.