Xtremax interview question

What is SQL Injection and CSRF?