sql注入截掉单引号'是不是就无解了哪位大神有办法的指点指点

sql注入截掉单引号'是不是就无解了
id=replace(trim(request("id")),"'","")

Set rs=GrateRs("Select * from ab where a like '"&id&"'",3)
if rs.bof and rs.eof then
rs.close
set rs=nothing
end if