Guía virtual para la prevención y detección de vulnerabilidades SQL-Injection en sitios Web

Abstract

Abstract:The present investigation is a guide about how detect and prevent that a Web site presents a SQL-i vulnerability type, by means of the use of automated tools, for the objective achieve has begun the analysis of theoretical concepts related databases, vulnerability analysis tools, prevention mechanisms through the use of tools, best programming practices updated to date, and ways to attack a database when there are no adequate mechanisms to implement it. The methodology carried out is distributed in four important phases at the moment of finding and preventing an existing vulnerability in a web application. For validation process, four projects were taken random and the respective tests were carried out, the results are shown and the way in which the present vulnerability is corrected.