{"id":237,"date":"2024-12-09T12:17:02","date_gmt":"2024-12-09T11:17:02","guid":{"rendered":"https:\/\/cienciaytecnology.com\/wordpress\/?p=237"},"modified":"2026-04-30T21:21:17","modified_gmt":"2026-04-30T19:21:17","slug":"sql-injection","status":"publish","type":"post","link":"https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/","title":{"rendered":"SQL Injection"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Que es SQL injection, explicamelo detalladamente en que consiste y las modalidades : basada en errores, tiempo, booleanos, uniones y stacked querys<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">La <strong>SQL Injection<\/strong> (inyecci\u00f3n SQL) es una t\u00e9cnica de ataque cibern\u00e9tico que explota vulnerabilidades en la forma en que una aplicaci\u00f3n interact\u00faa con su base de datos. Los atacantes insertan c\u00f3digo SQL malicioso en las consultas que una aplicaci\u00f3n web realiza a su base de datos, lo que puede permitirles acceder, modificar o eliminar datos sin autorizaci\u00f3n1.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Modalidades de SQL Injection<\/h3>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li><strong>SQL Injection Basada en Errores<\/strong>:\n<ul class=\"wp-block-list\">\n<li><strong>Descripci\u00f3n<\/strong>: Consiste en insertar c\u00f3digo SQL que provoque un error en la base de datos. Los mensajes de error pueden revelar informaci\u00f3n sobre la estructura de la base de datos.<\/li>\n\n\n\n<li><strong>Ejemplo<\/strong>: <code>'; DROP TABLE users; --<\/code><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>SQL Injection Basada en Tiempo<\/strong>:\n<ul class=\"wp-block-list\">\n<li><strong>Descripci\u00f3n<\/strong>: Utiliza funciones de tiempo para determinar si una consulta es verdadera o falsa. Esto puede ser usado para extraer datos de la base de datos.<\/li>\n\n\n\n<li><strong>Ejemplo<\/strong>: <code>'; IF (1=1) { WAITFOR DELAY '0:0:5' --<\/code><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>SQL Injection Basada en Booleanos<\/strong>:\n<ul class=\"wp-block-list\">\n<li><strong>Descripci\u00f3n<\/strong>: Inserta condiciones booleanas en las consultas SQL para filtrar datos. Si la condici\u00f3n es verdadera, la consulta devuelve resultados; si es falsa, no devuelve nada2.<\/li>\n\n\n\n<li><strong>Ejemplo<\/strong>: <code>'; AND 1=1 UNION SELECT username, password FROM users --<\/code><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>SQL Injection Basada en Uniones<\/strong>:\n<ul class=\"wp-block-list\">\n<li><strong>Descripci\u00f3n<\/strong>: Utiliza la cl\u00e1usula <code>UNION<\/code> para combinar los resultados de m\u00faltiples consultas SQL. Esto puede ser usado para extraer datos de diferentes tablas.<\/li>\n\n\n\n<li><strong>Ejemplo<\/strong>: <code>'; UNION SELECT username, password FROM users --<\/code><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>SQL Injection Basada en Consultas Empilhadas<\/strong>:\n<ul class=\"wp-block-list\">\n<li><strong>Descripci\u00f3n<\/strong>: Inserta m\u00faltiples consultas SQL en una sola l\u00ednea, separadas por punto y coma. Esto puede ser usado para ejecutar m\u00faltiples comandos en una sola solicitud.<\/li>\n\n\n\n<li><strong>Ejemplo<\/strong>: <code>'; DROP TABLE users; SELECT * FROM users --<\/code><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Prevenci\u00f3n de SQL Injection<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Para prevenir ataques de SQL Injection, es importante seguir buenas pr\u00e1cticas de seguridad, como:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Uso de declaraciones preparadas (Prepared Statements)<\/strong>: Evita la concatenaci\u00f3n directa de entradas del usuario en las consultas SQL.<\/li>\n\n\n\n<li><strong>Validaci\u00f3n y saneamiento de entradas<\/strong>: Aseg\u00farate de que todas las entradas del usuario sean validadas y saneadas antes de ser utilizadas en consultas SQL.<\/li>\n\n\n\n<li><strong>Principio de menor privilegio<\/strong>: Limita los permisos de la base de datos para que las aplicaciones solo tengan acceso a los datos necesarios.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Laboratorio de prueba para SQL Injection<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Vamos a crear un laboratorio de prueba para practicar los ataques de SQL Injection:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Instalamos las herramientas que vamos a utilizar:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>apt install mariadb-server apache2 php-mysql<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Comprobamos que est\u00e1n corriendo los servicios mariadb y apache2<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>systemctl status apache2\n\n~# systemctl status apache2\n\u25cf apache2.service - The Apache HTTP Server\n     Loaded: loaded (\/usr\/lib\/systemd\/system\/apache2.service; enabled; preset: enabled)\n     Active: active (running) since Mon 2024-12-09 10:22:41 UTC; 21min ago\n Invocation: fcdbf07c016a4e8f9b6a7eba53ebc183\n       Docs: https:\/\/httpd.apache.org\/docs\/2.4\/\n   Main PID: 101574 (apache2)\n      Tasks: 55 (limit: 1110)\n     Memory: 7.3M (peak: 7.5M)\n        CPU: 187ms\n     CGroup: \/system.slice\/apache2.service\n             \u251c\u2500101574 \/usr\/sbin\/apache2 -k start\n             \u251c\u2500101576 \/usr\/sbin\/apache2 -k start\n             \u2514\u2500101577 \/usr\/sbin\/apache2 -k start\n\n~# systemctl status mariadb\n\u25cf mariadb.service - MariaDB 11.4.3 database server\n     Loaded: loaded (\/usr\/lib\/systemd\/system\/mariadb.service; enabled; preset: enabled)\n     Active: active (running) since Mon 2024-12-09 10:22:36 UTC; 22min ago\n Invocation: 0e663c8377c74f15becc832ea34b1594\n       Docs: man:mariadbd(8)\n             https:&#47;&#47;mariadb.com\/kb\/en\/library\/systemd\/\n   Main PID: 101138 (mariadbd)\n     Status: \"Taking your SQL requests now...\"\n      Tasks: 9 (limit: 7327)\n     Memory: 89.4M (peak: 93.6M)\n        CPU: 2.101s\n     CGroup: \/system.slice\/mariadb.service\n             \u2514\u2500101138 \/usr\/sbin\/mariadbd\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Vamos a crear la base de datos con su tabla y columnas que nos servir\u00e1 para hacer las consultas mysql<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">La primera vez al conectar con mysql -u root -p, podemos darle a enter sin escribir nada.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>~# mysql -uroot -p\nEnter password: \nWelcome to the MariaDB monitor.  Commands end with ; or \\g.\nYour MariaDB connection id is 31\nServer version: 11.4.3-MariaDB-1 Ubuntu 24.10\n\nCopyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.\n\nSupport MariaDB developers by giving a star at https:\/\/github.com\/MariaDB\/server\nType 'help;' or '\\h' for help. Type '\\c' to clear the current input statement.\n\nMariaDB &#91;(none)]&gt; <\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Los componentes principales de mysql son las bases de datos , tablas y columnas. Cada base de datos tiene tablas y cada tabla tiene columnas. As\u00ed que las consultas b\u00e1sicas para visualizar esto son: show databases; use database; show tablas; describe tabla; select * from tabla; select campo, campo from tabla. <\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>MariaDB &#91;(none)]&gt; show databases;\n+--------------------+\n| Database           |\n+--------------------+\n| information_schema |\n| mysql              |\n| performance_schema |\n| sys                |\n+--------------------+\n4 rows in set (0.001 sec)\n\nMariaDB &#91;(none)]&gt; use mysql;\nReading table information for completion of table and column names\nYou can turn off this feature to get a quicker startup with -A\n\nDatabase changed\nMariaDB &#91;mysql]&gt; show tables;\n+---------------------------+\n| Tables_in_mysql           |\n+---------------------------+\n| column_stats              |\n| columns_priv              |\n| db                        |\n| event                     |\n| func                      |\n| general_log               |\n| global_priv               |\n| gtid_slave_pos            |\n| help_category             |\n| help_keyword              |\n| help_relation             |\n| help_topic                |\n| index_stats               |\n| innodb_index_stats        |\n| innodb_table_stats        |\n| plugin                    |\n| proc                      |\n| procs_priv                |\n| proxies_priv              |\n| roles_mapping             |\n| servers                   |\n| slow_log                  |\n| table_stats               |\n| tables_priv               |\n| time_zone                 |\n| time_zone_leap_second     |\n| time_zone_name            |\n| time_zone_transition      |\n| time_zone_transition_type |\n| transaction_registry      |\n| user                      |\n+---------------------------+\n31 rows in set (0.001 sec)\n\nMariaDB &#91;mysql]&gt; describe user;\n+------------------------+---------------------+------+-----+----------+-------+\n| Field                  | Type                | Null | Key | Default  | Extra |\n+------------------------+---------------------+------+-----+----------+-------+\n| Host                   | char(255)           | NO   |     |          |       |\n| User                   | char(128)           | NO   |     |          |       |\n| Password               | longtext            | YES  |     | NULL     |       |\n| Select_priv            | varchar(1)          | YES  |     | NULL     |       |\n| Insert_priv            | varchar(1)          | YES  |     | NULL     |       |\n| Update_priv            | varchar(1)          | YES  |     | NULL     |       |\n| Delete_priv            | varchar(1)          | YES  |     | NULL     |       |\n| Create_priv            | varchar(1)          | YES  |     | NULL     |       |\n| Drop_priv              | varchar(1)          | YES  |     | NULL     |       |\n| Reload_priv            | varchar(1)          | YES  |     | NULL     |       |\n| Shutdown_priv          | varchar(1)          | YES  |     | NULL     |       |\n| Process_priv           | varchar(1)          | YES  |     | NULL     |       |\n| File_priv              | varchar(1)          | YES  |     | NULL     |       |\n| Grant_priv             | varchar(1)          | YES  |     | NULL     |       |\n| References_priv        | varchar(1)          | YES  |     | NULL     |       |\n| Index_priv             | varchar(1)          | YES  |     | NULL     |       |\n| Alter_priv             | varchar(1)          | YES  |     | NULL     |       |\n| Show_db_priv           | varchar(1)          | YES  |     | NULL     |       |\n| Super_priv             | varchar(1)          | YES  |     | NULL     |       |\n| Create_tmp_table_priv  | varchar(1)          | YES  |     | NULL     |       |\n| Lock_tables_priv       | varchar(1)          | YES  |     | NULL     |       |\n| Execute_priv           | varchar(1)          | YES  |     | NULL     |       |\n| Repl_slave_priv        | varchar(1)          | YES  |     | NULL     |       |\n| Repl_client_priv       | varchar(1)          | YES  |     | NULL     |       |\n| Create_view_priv       | varchar(1)          | YES  |     | NULL     |       |\n| Show_view_priv         | varchar(1)          | YES  |     | NULL     |       |\n| Create_routine_priv    | varchar(1)          | YES  |     | NULL     |       |\n| Alter_routine_priv     | varchar(1)          | YES  |     | NULL     |       |\n| Create_user_priv       | varchar(1)          | YES  |     | NULL     |       |\n| Event_priv             | varchar(1)          | YES  |     | NULL     |       |\n| Trigger_priv           | varchar(1)          | YES  |     | NULL     |       |\n| Create_tablespace_priv | varchar(1)          | YES  |     | NULL     |       |\n| Delete_history_priv    | varchar(1)          | YES  |     | NULL     |       |\n| ssl_type               | varchar(9)          | YES  |     | NULL     |       |\n| ssl_cipher             | longtext            | NO   |     |          |       |\n| x509_issuer            | longtext            | NO   |     |          |       |\n| x509_subject           | longtext            | NO   |     |          |       |\n| max_questions          | bigint(20) unsigned | NO   |     | 0        |       |\n| max_updates            | bigint(20) unsigned | NO   |     | 0        |       |\n| max_connections        | bigint(20) unsigned | NO   |     | 0        |       |\n| max_user_connections   | bigint(21)          | NO   |     | 0        |       |\n| plugin                 | longtext            | NO   |     |          |       |\n| authentication_string  | longtext            | NO   |     |          |       |\n| password_expired       | varchar(1)          | NO   |     |          |       |\n| is_role                | varchar(1)          | YES  |     | NULL     |       |\n| default_role           | longtext            | NO   |     |          |       |\n| max_statement_time     | decimal(12,6)       | NO   |     | 0.000000 |       |\n+------------------------+---------------------+------+-----+----------+-------+\n47 rows in set (0.002 sec)\n\nMariaDB &#91;mysql]&gt; select User, Password from user;\n+-------------+----------+\n| User        | Password |\n+-------------+----------+\n| mariadb.sys |          |\n| root        | invalid  |\n| mysql       | invalid  |\n+-------------+----------+\n3 rows in set (0.002 sec)<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Vamos a crear nuestra propia base de datos con los campos usuario , password, &#8230; para que desde un script en php establezcamos una conexi\u00f3n con dicha base de datos, y podamos realizar<strong> SQL Injection<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>MariaDB &#91;mysql]&gt; create database SQLInjection;\nQuery OK, 1 row affected (0.001 sec)\n\nMariaDB &#91;mysql]&gt; show databases;\n+--------------------+\n| Database           |\n+--------------------+\n| SQLInjection       |\n| information_schema |\n| mysql              |\n| performance_schema |\n| sys                |\n+--------------------+\n5 rows in set (0.001 sec)\n\nMariaDB &#91;mysql]&gt; use SQ\nSQL                  SQL_NO_CACHE         SQL_TSI_MINUTE       SQL_TSI_YEAR        \nSQL_BIG_RESULT       SQL_SMALL_RESULT     SQL_TSI_MONTH        SQLEXCEPTION        \nSQL_BUFFER_RESULT    SQL_THREAD           SQL_TSI_QUARTER      SQLSTATE            \nSQL_CACHE            SQL_TSI_DAY          SQL_TSI_SECOND       SQLWARNING          \nSQL_CALC_FOUND_ROWS  SQL_TSI_HOUR         SQL_TSI_WEEK         SQRT                \nMariaDB &#91;mysql]&gt; use SQLInjection;\nDatabase changed\nMariaDB &#91;SQLInjection]&gt; show tables;\nEmpty set (0.001 sec)\n\nMariaDB &#91;SQLInjection]&gt; create table users(id int(32), username varchar(32), password varchar(32));\nQuery OK, 0 rows affected (0.042 sec)\n\nMariaDB &#91;SQLInjection]&gt; show tables;\n+------------------------+\n| Tables_in_SQLInjection |\n+------------------------+\n| users                  |\n+------------------------+\n1 row in set (0.001 sec)\n\nMariaDB &#91;SQLInjection]&gt; describe users;\n+----------+-------------+------+-----+---------+-------+\n| Field    | Type        | Null | Key | Default | Extra |\n+----------+-------------+------+-----+---------+-------+\n| id       | int(32)     | YES  |     | NULL    |       |\n| username | varchar(32) | YES  |     | NULL    |       |\n| password | varchar(32) | YES  |     | NULL    |       |\n+----------+-------------+------+-----+---------+-------+\n3 rows in set (0.001 sec)\n\nMariaDB &#91;SQLInjection]&gt; # Vamos a introducir datos\nMariaDB &#91;SQLInjection]&gt; insert into users(id, username, password) values(1, 'admin', 'admin123');\nQuery OK, 1 row affected (0.002 sec)\n\nMariaDB &#91;SQLInjection]&gt; insert into users(id, username, password) values(2, 'david', 'david1234');\nQuery OK, 1 row affected (0.002 sec)\n\nMariaDB &#91;SQLInjection]&gt; insert into users(id, username, password) values(3, 'Hacker', 'hacker321');\nQuery OK, 1 row affected (0.003 sec)\n\nMariaDB &#91;SQLInjection]&gt; # Mostrar todos los campos de la tabla o ciertos campos de la tabla\nMariaDB &#91;SQLInjection]&gt; select * from users;\n+------+----------+-----------+\n| id   | username | password  |\n+------+----------+-----------+\n|    1 | admin    | admin123  |\n|    2 | david    | david1234 |\n|    3 | Hacker   | hacker321 |\n+------+----------+-----------+\n3 rows in set (0.001 sec)\n\nMariaDB &#91;SQLInjection]&gt; select username from users;\n+----------+\n| username |\n+----------+\n| admin    |\n| david    |\n| Hacker   |\n+----------+\n3 rows in set (0.001 sec)<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>La inyecci\u00f3n SQL es una de las vulnerabilidades web m\u00e1s comunes y peligrosas. Aprende c\u00f3mo los atacantes explotan fallos en la validaci\u00f3n de datos para manipular tu base de datos MySQL, y qu\u00e9 medidas de seguridad cr\u00edticas (como las consultas preparadas) debes implementar en tu c\u00f3digo PHP para proteger la integridad de tu WordPress.<\/p>\n","protected":false},"author":1,"featured_media":818,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_kadence_starter_templates_imported_post":false,"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"categories":[63],"tags":[226,225,227,224,230,232,228,229,231],"class_list":["post-237","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hacking","tag-apache2","tag-mariadb","tag-php-mysql","tag-sql-injection","tag-sql-injection-basada-en-booleanos","tag-sql-injection-basada-en-consultas","tag-sql-injection-basada-en-errores","tag-sql-injection-basada-en-tiempo","tag-sql-injection-basada-en-uniones"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>SQL Injection - Ciencia y Tecnologia<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SQL Injection - Ciencia y Tecnologia\" \/>\n<meta property=\"og:description\" content=\"La inyecci\u00f3n SQL es una de las vulnerabilidades web m\u00e1s comunes y peligrosas. Aprende c\u00f3mo los atacantes explotan fallos en la validaci\u00f3n de datos para manipular tu base de datos MySQL, y qu\u00e9 medidas de seguridad cr\u00edticas (como las consultas preparadas) debes implementar en tu c\u00f3digo PHP para proteger la integridad de tu WordPress.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/\" \/>\n<meta property=\"og:site_name\" content=\"Ciencia y Tecnologia\" \/>\n<meta property=\"article:published_time\" content=\"2024-12-09T11:17:02+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-30T19:21:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cienciaytecnology.com\/wordpress\/wp-content\/uploads\/2024\/12\/sql-injection.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1408\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"david\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"david\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/sql-injection\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/sql-injection\\\/\"},\"author\":{\"name\":\"david\",\"@id\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/b76777e3c0d2d08ea263068461c90d4b\"},\"headline\":\"SQL Injection\",\"datePublished\":\"2024-12-09T11:17:02+00:00\",\"dateModified\":\"2026-04-30T19:21:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/sql-injection\\\/\"},\"wordCount\":512,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/b76777e3c0d2d08ea263068461c90d4b\"},\"image\":{\"@id\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/sql-injection\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/sql-injection.jpg\",\"keywords\":[\"apache2\",\"mariadb\",\"php-mysql\",\"SQL Injection\",\"sql injection basada en booleanos\",\"sql injection basada en consultas\",\"sql injection basada en errores\",\"sql injection basada en tiempo\",\"sql injection basada en uniones\"],\"articleSection\":[\"Hacking\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/sql-injection\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/sql-injection\\\/\",\"url\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/sql-injection\\\/\",\"name\":\"SQL Injection - Ciencia y Tecnologia\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/sql-injection\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/sql-injection\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/sql-injection.jpg\",\"datePublished\":\"2024-12-09T11:17:02+00:00\",\"dateModified\":\"2026-04-30T19:21:17+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/sql-injection\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/sql-injection\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/sql-injection\\\/#primaryimage\",\"url\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/sql-injection.jpg\",\"contentUrl\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/sql-injection.jpg\",\"width\":1408,\"height\":768},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/sql-injection\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SQL Injection\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/#website\",\"url\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/\",\"name\":\"Ciencia y Tecnologia\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/b76777e3c0d2d08ea263068461c90d4b\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/b76777e3c0d2d08ea263068461c90d4b\",\"name\":\"david\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a9d8ccd92847e24d772422bc56934157f705784123e5b11a9724d44add16e6bb?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a9d8ccd92847e24d772422bc56934157f705784123e5b11a9724d44add16e6bb?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a9d8ccd92847e24d772422bc56934157f705784123e5b11a9724d44add16e6bb?s=96&d=mm&r=g\",\"caption\":\"david\"},\"logo\":{\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a9d8ccd92847e24d772422bc56934157f705784123e5b11a9724d44add16e6bb?s=96&d=mm&r=g\"},\"sameAs\":[\"https:\\\/\\\/cienciaytecnology.com\\\/wordpress\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SQL Injection - Ciencia y Tecnologia","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/","og_locale":"es_ES","og_type":"article","og_title":"SQL Injection - Ciencia y Tecnologia","og_description":"La inyecci\u00f3n SQL es una de las vulnerabilidades web m\u00e1s comunes y peligrosas. Aprende c\u00f3mo los atacantes explotan fallos en la validaci\u00f3n de datos para manipular tu base de datos MySQL, y qu\u00e9 medidas de seguridad cr\u00edticas (como las consultas preparadas) debes implementar en tu c\u00f3digo PHP para proteger la integridad de tu WordPress.","og_url":"https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/","og_site_name":"Ciencia y Tecnologia","article_published_time":"2024-12-09T11:17:02+00:00","article_modified_time":"2026-04-30T19:21:17+00:00","og_image":[{"width":1408,"height":768,"url":"https:\/\/cienciaytecnology.com\/wordpress\/wp-content\/uploads\/2024\/12\/sql-injection.jpg","type":"image\/jpeg"}],"author":"david","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"david","Tiempo de lectura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/#article","isPartOf":{"@id":"https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/"},"author":{"name":"david","@id":"https:\/\/cienciaytecnology.com\/wordpress\/#\/schema\/person\/b76777e3c0d2d08ea263068461c90d4b"},"headline":"SQL Injection","datePublished":"2024-12-09T11:17:02+00:00","dateModified":"2026-04-30T19:21:17+00:00","mainEntityOfPage":{"@id":"https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/"},"wordCount":512,"commentCount":0,"publisher":{"@id":"https:\/\/cienciaytecnology.com\/wordpress\/#\/schema\/person\/b76777e3c0d2d08ea263068461c90d4b"},"image":{"@id":"https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/#primaryimage"},"thumbnailUrl":"https:\/\/cienciaytecnology.com\/wordpress\/wp-content\/uploads\/2024\/12\/sql-injection.jpg","keywords":["apache2","mariadb","php-mysql","SQL Injection","sql injection basada en booleanos","sql injection basada en consultas","sql injection basada en errores","sql injection basada en tiempo","sql injection basada en uniones"],"articleSection":["Hacking"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/","url":"https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/","name":"SQL Injection - Ciencia y Tecnologia","isPartOf":{"@id":"https:\/\/cienciaytecnology.com\/wordpress\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/#primaryimage"},"image":{"@id":"https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/#primaryimage"},"thumbnailUrl":"https:\/\/cienciaytecnology.com\/wordpress\/wp-content\/uploads\/2024\/12\/sql-injection.jpg","datePublished":"2024-12-09T11:17:02+00:00","dateModified":"2026-04-30T19:21:17+00:00","breadcrumb":{"@id":"https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/#primaryimage","url":"https:\/\/cienciaytecnology.com\/wordpress\/wp-content\/uploads\/2024\/12\/sql-injection.jpg","contentUrl":"https:\/\/cienciaytecnology.com\/wordpress\/wp-content\/uploads\/2024\/12\/sql-injection.jpg","width":1408,"height":768},{"@type":"BreadcrumbList","@id":"https:\/\/cienciaytecnology.com\/wordpress\/sql-injection\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/cienciaytecnology.com\/wordpress\/"},{"@type":"ListItem","position":2,"name":"SQL Injection"}]},{"@type":"WebSite","@id":"https:\/\/cienciaytecnology.com\/wordpress\/#website","url":"https:\/\/cienciaytecnology.com\/wordpress\/","name":"Ciencia y Tecnologia","description":"","publisher":{"@id":"https:\/\/cienciaytecnology.com\/wordpress\/#\/schema\/person\/b76777e3c0d2d08ea263068461c90d4b"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cienciaytecnology.com\/wordpress\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":["Person","Organization"],"@id":"https:\/\/cienciaytecnology.com\/wordpress\/#\/schema\/person\/b76777e3c0d2d08ea263068461c90d4b","name":"david","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/a9d8ccd92847e24d772422bc56934157f705784123e5b11a9724d44add16e6bb?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/a9d8ccd92847e24d772422bc56934157f705784123e5b11a9724d44add16e6bb?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a9d8ccd92847e24d772422bc56934157f705784123e5b11a9724d44add16e6bb?s=96&d=mm&r=g","caption":"david"},"logo":{"@id":"https:\/\/secure.gravatar.com\/avatar\/a9d8ccd92847e24d772422bc56934157f705784123e5b11a9724d44add16e6bb?s=96&d=mm&r=g"},"sameAs":["https:\/\/cienciaytecnology.com\/wordpress"]}]}},"_links":{"self":[{"href":"https:\/\/cienciaytecnology.com\/wordpress\/wp-json\/wp\/v2\/posts\/237","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cienciaytecnology.com\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cienciaytecnology.com\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cienciaytecnology.com\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cienciaytecnology.com\/wordpress\/wp-json\/wp\/v2\/comments?post=237"}],"version-history":[{"count":3,"href":"https:\/\/cienciaytecnology.com\/wordpress\/wp-json\/wp\/v2\/posts\/237\/revisions"}],"predecessor-version":[{"id":819,"href":"https:\/\/cienciaytecnology.com\/wordpress\/wp-json\/wp\/v2\/posts\/237\/revisions\/819"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cienciaytecnology.com\/wordpress\/wp-json\/wp\/v2\/media\/818"}],"wp:attachment":[{"href":"https:\/\/cienciaytecnology.com\/wordpress\/wp-json\/wp\/v2\/media?parent=237"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cienciaytecnology.com\/wordpress\/wp-json\/wp\/v2\/categories?post=237"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cienciaytecnology.com\/wordpress\/wp-json\/wp\/v2\/tags?post=237"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}