You need to escape the $comm variable
$comm = mysql_real_escape_string($comm);
That allows quotes to be inserted into the table.
You need to escape the $comm variable
$comm = mysql_real_escape_string($comm);
That allows quotes to be inserted into the table.