Now using mysql_real_escape_string instead of addslashes.
Tests for comment adding behaviour, and user logging in.
Fix for over-enthusiastic character encoding in comments, new HTMLPurifier for filter_user_input.
Add HTMLPurifier licence, update LICENCE file to Markdown and add HTMLPurifier reference.
Adjust tests to only look at HTML cleansing, not encoding.
Photo update from admin web photo upload interface.
Handle out of ISO-8859-1 characters

This is something of a kludge but everything short of converting it all
to UTF-8 is going to be. This at least seems to handle most of what is
likely to be thrown at it without breaking anything.
Merge branch '30-annotation-filter'