sql injections

From: Adam K (dimitarfix_at_yahoo.co.uk)
Date: 04/19/05 

Date: Tue, 19 Apr 2005 13:00:47 +0100

HI,

I've got simple question.

Is it enough to prevent sql injections if I transform all ' in ".

What else I have to do?

Thanks