Security fixes. Ensure that numeric values are actually numeric using is_numeric

so users can't login as admin by passing in non-numeric values.

include/comment.php

@@ -25,7 +25,7 @@ class Comment {
      */
     function Comment($iCommentId="")
     {
-        if($iCommentId)
+        if(is_numeric($iCommentId))
         {
 
             $sQuery = "SELECT appComments.*, appVersion.appId AS appId