function added to escape sqlinjections and html input. Some other minor changes made
tidying up from escaping
Reworking of the create thread form styling to look better