https://unaaldia.hispasec.com/2012/06/inyeccion-sql-en-ruby-on-rails.html