I follow a SQLi tool on github and recently saw a conversation between the developer and a user. The user had tried to inject and gotten some errors, in the requests there was a anti-csfr token. The developer then told the user that they didn't know what they were dealing with and closed the issue, because one, they were trying to force an incorrect database, and two, they had gotten the token. Now I'm not saying that the developer is wrong, I'm just curious.
If I'm correct, CSFR, and SQLi are two completely different vulnerabilities and do not correspond with one another. If you have a token that's all fine and dandy, but it's not going to help you with SQLi.
So my question is, what does an anti-CSFR token and SQLi have anything to do with one another, do they go hand in hand?
I'm pretty sure they don't, but I've been wrong before.