1. write comment with local server side time ( it is not CURRENT_TIMESTAMP )
2. password encrypt using MD5