Now using mysql_real_escape_string instead of addslashes.
Tests for comment adding behaviour, and user logging in.