Report question

Question: Is there some way to inject SQL even if the ' character is deleted?