No it doesn't. The argument isn't "block ' characters to stop SQL injection" it's "force the developer to use prepared statements and no dynamically constructe

No it doesn't. The argument isn't "block ' characters to stop SQL injection" it's "force the developer to use prepared statements and no dynamically constructed queries".