Added an SQL injection vulnerability to the comments add action.