mukarramkhalid.com
Without Quotes - String Based SQL Injection
In this special case, you can perform string based sql injection without using quotes. Even if quotes are blocked, you can inject with no quotes at all.