PHP Blind SQL injection on my web application

Question

im bulding a student management system using php and codeigniter. After running a webapp vulnerability scanner i got a critical error on \'stid\' paremiter is vulnerable to