SQL Injection Help - Custom CMS Recently Hacked

Hello, We've been dealing with some SQL injection attacks on our custom CMS. The CMS was built by a coder that we no longer have contact with, so we need someone to look at the code and identify where the attacks are happening. Coder must be able to prevent these SQL injection attacks by looking at our CMS code. Please provide how long this will take you to complete. Thanks