使PHP SQL随机查询从注入安全

我读到过，为了防止SQL注入，所有MySQL语句实际上应该是我的mysqli和参数。上面的代码连接到一个数据库，选择一个随机的"动词"行，然后使用mysql_fetch_assoc获取与"动词"行和def列(该动词的定义)相交的单元格。

什么变化可以使随机查询从注入安全?

        $user_name = "name";
        $password = "password";
        $database = "words";
        $server = "host";
    $db_handle = mysqli_connect($server, $user_name, $password) or die (mysqli_error($db_handle));
    $db_found = mysqli_select_db($db_handle, $database) or die (mysqli_error($db_handle));
        $randVerb = mysql_query("SELECT * FROM verbs ORDER BY RAND() LIMIT 1"); 
        $db_field = mysql_fetch_assoc($randVerb); 
        $definition= $db_field['def'];