<style id="elementor-post-11854">.elementor-11854 .elementor-element.elementor-element-28ced8f img{width:300px;box-shadow:0px 0px 10px 0px rgba(0, 0, 0, 0.25);}.elementor-11854 .elementor-element.elementor-element-28ced8f:hover img{opacity:0.75;}.elementor-11854 .elementor-element.elementor-element-1de0230 img{width:300px;box-shadow:0px 0px 10px 0px rgba(0, 0, 0, 0.25);}.elementor-11854 .elementor-element.elementor-element-1de0230:hover img{opacity:0.75;}.elementor-11854 .elementor-element.elementor-element-9d75a58 img{width:300px;box-shadow:0px 0px 10px 0px rgba(0, 0, 0, 0.25);}.elementor-11854 .elementor-element.elementor-element-9d75a58:hover img{opacity:0.75;}.elementor-11854 .elementor-element.elementor-element-19e84d8 .elementor-author-box__avatar img{width:65px;height:65px;border-radius:58px;}body.rtl .elementor-11854 .elementor-element.elementor-element-19e84d8.elementor-author-box--layout-image-left .elementor-author-box__avatar,
					 body:not(.rtl) .elementor-11854 .elementor-element.elementor-element-19e84d8:not(.elementor-author-box--layout-image-above) .elementor-author-box__avatar{margin-right:19px;margin-left:0;}body:not(.rtl) .elementor-11854 .elementor-element.elementor-element-19e84d8.elementor-author-box--layout-image-right .elementor-author-box__avatar,
					 body.rtl .elementor-11854 .elementor-element.elementor-element-19e84d8:not(.elementor-author-box--layout-image-above) .elementor-author-box__avatar{margin-left:19px;margin-right:0;}.elementor-11854 .elementor-element.elementor-element-19e84d8.elementor-author-box--layout-image-above .elementor-author-box__avatar{margin-bottom:19px;}.elementor-11854 .elementor-element.elementor-element-19e84d8 .elementor-author-box__name{margin-bottom:0px;}.elementor-11854 .elementor-element.elementor-element-19e84d8 .elementor-author-box__bio{margin-bottom:9px;}.elementor-11854 .elementor-element.elementor-element-19e84d8 .elementor-author-box__button{border-width:0px;}</style>{"id":11854,"date":"2025-01-08T16:52:08","date_gmt":"2025-01-08T15:52:08","guid":{"rendered":"https:\/\/www.infordisa.com\/soc\/?p=11854"},"modified":"2025-08-18T13:15:39","modified_gmt":"2025-08-18T11:15:39","slug":"filtrat-de-bases-de-dades-la-famosa-sql-injection","status":"publish","type":"post","link":"https:\/\/www.infordisa.com\/soc\/ca\/filtrado-de-bases-de-datos-la-famosa-sql-injection\/","title":{"rendered":"Filtrat de bases de dades, la famosa SQL Injection"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"11854\" class=\"elementor elementor-11854\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-129331a elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"129331a\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-0602cf0\" data-id=\"0602cf0\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5a14862 elementor-widget elementor-widget-text-editor\" data-id=\"5a14862\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Tots hem sentit not\u00edcies sobre bases de dades filtrades, d&#039;organitzacions de tota mena, avui explicarem com passen. Per posar-vos en situaci\u00f3, <strong>SQL<\/strong> \u00e9s el fam\u00f3s llenguatge de consulta de les bases de dades, el qual emprarem per realitzar aquestes <b>injeccions, <\/b>i aix\u00ed, auditar entorns mal desenvolupats (una cosa molt comuna).<\/p><p><strong>SQL Injection<\/strong> (<strong>SQLI<\/strong>) \u00e9s una t\u00e8cnica d&#039;atac que hem explorat per comprendre com s&#039;exploten vulnerabilitats en entorns que <strong>no validen adequadament<\/strong> l&#039;entrada de l&#039;usuari a les consultes SQL enviades a la base de dades. He analitzat com els atacants poden utilitzar aquesta t\u00e8cnica per executar consultes SQL malicioses i accedir a informaci\u00f3 confidencial, com ara noms d&#039;usuari, contrasenyes i altres dades sensibles emmagatzemades.<\/p><p>Si l&#039;aplicaci\u00f3 no valida l&#039;entrada de l&#039;usuari correctament, la consulta maliciosa s&#039;executa a la base de dades, cosa que podria permetre l&#039;acc\u00e9s no autoritzat a informaci\u00f3 confidencial o fins i tot el control complet de la base de dades.<\/p><p>Identifiquem diversos tipus d&#039;injeccions SQL comunes, incloent-hi:<\/p><ul><li><strong>Injecci\u00f3 SQL basada en errors<\/strong>:<br>Aprofita <strong>errors al codi SQL<\/strong> per revelar informaci\u00f3. Per exemple, missatges espec\u00edfics en errors poden ser usats per extreure detalls addicionals del sistema.<\/li><li><strong>Injecci\u00f3 SQL basada en temps<\/strong>:<br>Empra consultes que <strong>introdueixen retards deliberats<\/strong>. Per exemple, els atacants poden observar els temps de resposta per determinar detalls sobre lestructura de la base de dades.<\/li><li><strong>Injecci\u00f3 SQL basada en booleans<\/strong>:<br>Usa consultes amb <strong>expressions booleanes<\/strong> per identificar informaci\u00f3 addicional, com ara l&#039;exist\u00e8ncia d&#039;un usuari a la base de dades. Per exemple, es pot utilitzar una consulta amb una expressi\u00f3 booleana per determinar si un usuari existeix a una base de dades.<\/li><li><strong>Injecci\u00f3 SQL basada en unions<\/strong>:<br>Utilitza la cl\u00e0usula <strong>\u201cUNI\u00d3\u201d<\/strong> per combinar consultes i accedir a dades addicionals, com ara permisos d&#039;usuaris juntament amb la informaci\u00f3 b\u00e0sica. Per exemple, si s&#039;utilitza una consulta que torna informaci\u00f3 sobre els usuaris i s&#039;afegeix una cl\u00e0usula \u201cUNION\u201d amb una altra consulta que torna informaci\u00f3 sobre els permisos, es pot obtenir informaci\u00f3 addicional sobre els permisos dels usuaris.<\/li><li><strong>Injecci\u00f3 SQL basada en consultes apilades<\/strong>:<br>Explota la capacitat de <strong>executar m\u00faltiples consultes<\/strong> en una sola instrucci\u00f3, permetent realitzar m\u00faltiples operacions a la base de dades de manera no autoritzada. Per exemple, es pot utilitzar una consulta que insereix un registre en una taula i despr\u00e9s afegir una consulta addicional que torna informaci\u00f3 sobre la taula.<\/li><\/ul><p>Aquestes t\u00e8cniques s&#039;apliquen a diferents tipus de bases de dades com, <strong>relacionals<\/strong>,&nbsp;<strong>NoSQL<\/strong>, de <strong>grafs<\/strong> o de <strong>objectes<\/strong>.<\/p><p>\u00c9s important entendre els diferents tipus d&#039;injeccions SQL i com es poden utilitzar per obtenir informaci\u00f3 confidencial. Els desenvolupadors han d&#039;assegurar-se de validar adequadament l&#039;entrada de l&#039;usuari i utilitzar t\u00e8cniques de defensa, com la sanititzaci\u00f3 d&#039;entrada i la preparaci\u00f3 de consultes SQL, per prevenir les injeccions SQL a les seves aplicacions web. Igual que monitoritzar els <b>logs <\/b>que es generen en realitzar aquestes peticions, i poder detectar <b>comportaments an\u00f2mals.<\/b><\/p><p>Us mostro un exemple a grans trets de com amb l&#039;eina <b>Burp Suite<\/b>&nbsp;intercepte i modifico la petici\u00f3 <b>POST<\/b> per extreure informaci\u00f3 d&#039;una base de dades mitjan\u00e7ant una <b>SQLI<\/b>. Aix\u00f2 es realitza en un portal login on nosaltres inserim un usuari i contrasenya que v\u00e0lida contra una base de dades.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-28ced8f elementor-widget elementor-widget-image\" data-id=\"28ced8f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Captura-de-pantalla-2025-01-08-100823.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Burpsuite 1\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6MTE4NTUsInVybCI6Imh0dHBzOlwvXC93d3cuaW5mb3JkaXNhLmNvbVwvc29jXC93cC1jb250ZW50XC91cGxvYWRzXC8yMDI1XC8wMVwvQ2FwdHVyYS1kZS1wYW50YWxsYS0yMDI1LTAxLTA4LTEwMDgyMy5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"871\" height=\"557\" src=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Captura-de-pantalla-2025-01-08-100823.png\" class=\"attachment-large size-large wp-image-11855\" alt=\"\" srcset=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Captura-de-pantalla-2025-01-08-100823.png 871w, https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Captura-de-pantalla-2025-01-08-100823-300x192.png 300w, https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Captura-de-pantalla-2025-01-08-100823-768x491.png 768w, https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Captura-de-pantalla-2025-01-08-100823-18x12.png 18w\" sizes=\"(max-width: 871px) 100vw, 871px\"\/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1de0230 elementor-widget elementor-widget-image\" data-id=\"1de0230\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Captura-de-pantalla-2025-01-08-101107.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Burpsuite 2\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6MTE4NjIsInVybCI6Imh0dHBzOlwvXC93d3cuaW5mb3JkaXNhLmNvbVwvc29jXC93cC1jb250ZW50XC91cGxvYWRzXC8yMDI1XC8wMVwvQ2FwdHVyYS1kZS1wYW50YWxsYS0yMDI1LTAxLTA4LTEwMTEwNy5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"757\" height=\"156\" src=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Captura-de-pantalla-2025-01-08-101107.png\" class=\"attachment-large size-large wp-image-11862\" alt=\"\" srcset=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Captura-de-pantalla-2025-01-08-101107.png 757w, https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Captura-de-pantalla-2025-01-08-101107-300x62.png 300w, https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Captura-de-pantalla-2025-01-08-101107-18x4.png 18w\" sizes=\"(max-width: 757px) 100vw, 757px\"\/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9d75a58 elementor-widget elementor-widget-image\" data-id=\"9d75a58\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Captura-de-pantalla-2025-01-08-101112.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Burpsuite 3\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6MTE4NjMsInVybCI6Imh0dHBzOlwvXC93d3cuaW5mb3JkaXNhLmNvbVwvc29jXC93cC1jb250ZW50XC91cGxvYWRzXC8yMDI1XC8wMVwvQ2FwdHVyYS1kZS1wYW50YWxsYS0yMDI1LTAxLTA4LTEwMTExMi5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"669\" height=\"207\" src=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Captura-de-pantalla-2025-01-08-101112.png\" class=\"attachment-large size-large wp-image-11863\" alt=\"\" srcset=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Captura-de-pantalla-2025-01-08-101112.png 669w, https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Captura-de-pantalla-2025-01-08-101112-300x93.png 300w, https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Captura-de-pantalla-2025-01-08-101112-18x6.png 18w\" sizes=\"(max-width: 669px) 100vw, 669px\"\/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-71e0480 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"71e0480\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-625070f\" data-id=\"625070f\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-19e84d8 elementor-widget elementor-widget-author-box\" data-id=\"19e84d8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"author-box.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-author-box\">\n\t\t\t\t\t\t\t<div class=\"elementor-author-box__avatar\">\n\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2024\/07\/iberbel.jpg\" alt=\"Picture of Iker Berbel\" loading=\"lazy\"\/>\n\t\t\t\t<\/div>\n\t\t\t\n\t\t\t<div class=\"elementor-author-box__text\">\n\t\t\t\t\t\t\t\t\t<div>\n\t\t\t\t\t\t<h4 class=\"elementor-author-box__name\">\n\t\t\t\t\t\t\tIker Berbel\t\t\t\t\t\t<\/h4>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-author-box__bio\">\n\t\t\t\t\t\t<p>Consultor IT<\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Els atacants poden utilitzar aquesta t\u00e8cnica per executar consultes SQL malicioses i obtenir informaci\u00f3 confidencial, com ara noms d&#039;usuari, contrasenyes i altra informaci\u00f3 emmagatzemada a la base de dades.<\/p>","protected":false},"author":2,"featured_media":11869,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[39],"tags":[205,44,204],"class_list":["post-11854","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-actualidad","tag-bases-de-datos","tag-ciberseguridad","tag-sqli","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-25"],"acf":[],"yoast_head":"<title>Filtrado de bases de datos, la famosa SQL Injection - INFORDISA \/ Security Operations Center<\/title>\n<meta name=\"description\" content=\"Los atacantes pueden utilizar esta t\u00e9cnica para ejecutar consultas SQL maliciosas y obtener informaci\u00f3n confidencial, como nombres de usuario, contrase\u00f1as y otra informaci\u00f3n almacenada en la base de datos.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/filtrat-de-bases-de-dades-la-famosa-sql-injection\/\" \/>\n<meta property=\"og:locale\" content=\"ca_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Filtrado de bases de datos, la famosa SQL Injection - INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"og:description\" content=\"Los atacantes pueden utilizar esta t\u00e9cnica para ejecutar consultas SQL maliciosas y obtener informaci\u00f3n confidencial, como nombres de usuario, contrase\u00f1as y otra informaci\u00f3n almacenada en la base de datos.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infordisa.com\/soc\/ca\/filtrat-de-bases-de-dades-la-famosa-sql-injection\/\" \/>\n<meta property=\"og:site_name\" content=\"INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infordisa\/\" \/>\n<meta property=\"article:published_time\" content=\"2025-01-08T15:52:08+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-18T11:15:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Sqli.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"539\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Jordi Sala\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Sqli.webp\" \/>\n<meta name=\"twitter:creator\" content=\"@infordisa\" \/>\n<meta name=\"twitter:site\" content=\"@infordisa\" \/>\n<meta name=\"twitter:label1\" content=\"Escrit per\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jordi Sala\" \/>\n\t<meta name=\"twitter:label2\" content=\"Temps estimat de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minuts\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/filtrado-de-bases-de-datos-la-famosa-sql-injection\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/filtrado-de-bases-de-datos-la-famosa-sql-injection\\\/\"},\"author\":{\"name\":\"Jordi Sala\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\"},\"headline\":\"Filtrado de bases de datos, la famosa SQL Injection\",\"datePublished\":\"2025-01-08T15:52:08+00:00\",\"dateModified\":\"2025-08-18T11:15:39+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/filtrado-de-bases-de-datos-la-famosa-sql-injection\\\/\"},\"wordCount\":590,\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/filtrado-de-bases-de-datos-la-famosa-sql-injection\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/Sqli.webp\",\"keywords\":[\"Bases de datos\",\"Ciberseguridad\",\"SQLI\"],\"articleSection\":[\"Actualidad\"],\"inLanguage\":\"ca\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/filtrado-de-bases-de-datos-la-famosa-sql-injection\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/filtrado-de-bases-de-datos-la-famosa-sql-injection\\\/\",\"name\":\"Filtrado de bases de datos, la famosa SQL Injection - INFORDISA \\\/ Security Operations Center\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/filtrado-de-bases-de-datos-la-famosa-sql-injection\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/filtrado-de-bases-de-datos-la-famosa-sql-injection\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/Sqli.webp\",\"datePublished\":\"2025-01-08T15:52:08+00:00\",\"dateModified\":\"2025-08-18T11:15:39+00:00\",\"description\":\"Los atacantes pueden utilizar esta t\u00e9cnica para ejecutar consultas SQL maliciosas y obtener informaci\u00f3n confidencial, como nombres de usuario, contrase\u00f1as y otra informaci\u00f3n almacenada en la base de datos.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/filtrado-de-bases-de-datos-la-famosa-sql-injection\\\/#breadcrumb\"},\"inLanguage\":\"ca\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/filtrado-de-bases-de-datos-la-famosa-sql-injection\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"ca\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/filtrado-de-bases-de-datos-la-famosa-sql-injection\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/Sqli.webp\",\"contentUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/Sqli.webp\",\"width\":1024,\"height\":539},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/filtrado-de-bases-de-datos-la-famosa-sql-injection\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Filtrado de bases de datos, la famosa SQL Injection\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"name\":\"INFORDISA \\\/ Security Operations Center\",\"description\":\"Portal de Ciberseguridad\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ca\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\",\"name\":\"INFORDISA \\\/ Security Operations Center\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ca\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"contentUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"width\":400,\"height\":34,\"caption\":\"INFORDISA \\\/ Security Operations Center\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/infordisa\\\/\",\"https:\\\/\\\/x.com\\\/infordisa\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/infordisa\",\"https:\\\/\\\/www.youtube.com\\\/user\\\/InfordisaTV\",\"https:\\\/\\\/www.instagram.com\\\/infordisa\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\",\"name\":\"Jordi Sala\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ca\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"caption\":\"Jordi Sala\"},\"description\":\"Marketing\",\"sameAs\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"],\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/ca\\\/author\\\/jsala\\\/\"}]}<\/script>","yoast_head_json":{"title":"Filtrat de bases de dades, la famosa SQL Injection - INFORDISA \/ Security Operations Center","description":"Els atacants poden utilitzar aquesta t\u00e8cnica per executar consultes SQL malicioses i obtenir informaci\u00f3 confidencial, com ara noms d&#039;usuari, contrasenyes i altra informaci\u00f3 emmagatzemada a la base de dades.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infordisa.com\/soc\/ca\/filtrat-de-bases-de-dades-la-famosa-sql-injection\/","og_locale":"ca_ES","og_type":"article","og_title":"Filtrado de bases de datos, la famosa SQL Injection - INFORDISA \/ Security Operations Center","og_description":"Los atacantes pueden utilizar esta t\u00e9cnica para ejecutar consultas SQL maliciosas y obtener informaci\u00f3n confidencial, como nombres de usuario, contrase\u00f1as y otra informaci\u00f3n almacenada en la base de datos.","og_url":"https:\/\/www.infordisa.com\/soc\/ca\/filtrat-de-bases-de-dades-la-famosa-sql-injection\/","og_site_name":"INFORDISA \/ Security Operations Center","article_publisher":"https:\/\/www.facebook.com\/infordisa\/","article_published_time":"2025-01-08T15:52:08+00:00","article_modified_time":"2025-08-18T11:15:39+00:00","og_image":[{"width":1024,"height":539,"url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Sqli.webp","type":"image\/webp"}],"author":"Jordi Sala","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Sqli.webp","twitter_creator":"@infordisa","twitter_site":"@infordisa","twitter_misc":{"Escrit per":"Jordi Sala","Temps estimat de lectura":"4 minuts"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.infordisa.com\/soc\/filtrado-de-bases-de-datos-la-famosa-sql-injection\/#article","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/filtrado-de-bases-de-datos-la-famosa-sql-injection\/"},"author":{"name":"Jordi Sala","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375"},"headline":"Filtrado de bases de datos, la famosa SQL Injection","datePublished":"2025-01-08T15:52:08+00:00","dateModified":"2025-08-18T11:15:39+00:00","mainEntityOfPage":{"@id":"https:\/\/www.infordisa.com\/soc\/filtrado-de-bases-de-datos-la-famosa-sql-injection\/"},"wordCount":590,"publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/filtrado-de-bases-de-datos-la-famosa-sql-injection\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Sqli.webp","keywords":["Bases de datos","Ciberseguridad","SQLI"],"articleSection":["Actualidad"],"inLanguage":"ca"},{"@type":"WebPage","@id":"https:\/\/www.infordisa.com\/soc\/filtrado-de-bases-de-datos-la-famosa-sql-injection\/","url":"https:\/\/www.infordisa.com\/soc\/filtrado-de-bases-de-datos-la-famosa-sql-injection\/","name":"Filtrat de bases de dades, la famosa SQL Injection - INFORDISA \/ Security Operations Center","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.infordisa.com\/soc\/filtrado-de-bases-de-datos-la-famosa-sql-injection\/#primaryimage"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/filtrado-de-bases-de-datos-la-famosa-sql-injection\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Sqli.webp","datePublished":"2025-01-08T15:52:08+00:00","dateModified":"2025-08-18T11:15:39+00:00","description":"Els atacants poden utilitzar aquesta t\u00e8cnica per executar consultes SQL malicioses i obtenir informaci\u00f3 confidencial, com ara noms d&#039;usuari, contrasenyes i altra informaci\u00f3 emmagatzemada a la base de dades.","breadcrumb":{"@id":"https:\/\/www.infordisa.com\/soc\/filtrado-de-bases-de-datos-la-famosa-sql-injection\/#breadcrumb"},"inLanguage":"ca","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infordisa.com\/soc\/filtrado-de-bases-de-datos-la-famosa-sql-injection\/"]}]},{"@type":"ImageObject","inLanguage":"ca","@id":"https:\/\/www.infordisa.com\/soc\/filtrado-de-bases-de-datos-la-famosa-sql-injection\/#primaryimage","url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Sqli.webp","contentUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2025\/01\/Sqli.webp","width":1024,"height":539},{"@type":"BreadcrumbList","@id":"https:\/\/www.infordisa.com\/soc\/filtrado-de-bases-de-datos-la-famosa-sql-injection\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/www.infordisa.com\/soc\/"},{"@type":"ListItem","position":2,"name":"Filtrado de bases de datos, la famosa SQL Injection"}]},{"@type":"WebSite","@id":"https:\/\/www.infordisa.com\/soc\/#website","url":"https:\/\/www.infordisa.com\/soc\/","name":"INFORDISA \/ Security Operations Center","description":"Portal de Ciberseguretat","publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infordisa.com\/soc\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ca"},{"@type":"Organization","@id":"https:\/\/www.infordisa.com\/soc\/#organization","name":"INFORDISA \/ Security Operations Center","url":"https:\/\/www.infordisa.com\/soc\/","logo":{"@type":"ImageObject","inLanguage":"ca","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/","url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","contentUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","width":400,"height":34,"caption":"INFORDISA \/ Security Operations Center"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infordisa\/","https:\/\/x.com\/infordisa","https:\/\/www.linkedin.com\/company\/infordisa","https:\/\/www.youtube.com\/user\/InfordisaTV","https:\/\/www.instagram.com\/infordisa\/"]},{"@type":"Person","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375","name":"Jordi Sala","image":{"@type":"ImageObject","inLanguage":"ca","@id":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","caption":"Jordi Sala"},"description":"M\u00e0rqueting","sameAs":["https:\/\/www.infordisa.com\/soc\/"],"url":"https:\/\/www.infordisa.com\/soc\/ca\/author\/jsala\/"}]}},"_links":{"self":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts\/11854","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/comments?post=11854"}],"version-history":[{"count":5,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts\/11854\/revisions"}],"predecessor-version":[{"id":11890,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts\/11854\/revisions\/11890"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/media\/11869"}],"wp:attachment":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/media?parent=11854"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/categories?post=11854"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/tags?post=11854"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}