Styling and xss protection in list_comments

Explaining

$search=array("&","<",">","\"");
$replace=array("&amp;","&lt;","&gt;","&quot;");	    

- The comments stored in cackle system might contain those characters. The same way they are fetched into the user's database. Then if they are displayed directly, the scripts may start working.

And also some styling to correspond to the cackle system style (in case the javascript is not loaded)