Fixed ticket comment submit and guarded all forms vs SQL injects