mittigate SQL injection, XSS comments..