Rewrite comm.php to prevent SQL injections