Davy interview question

What is SQL Injection and how to secure web application ?