	protected function _add_comment_log( $id, $action, $comment = null ) {
		if ( is_null( $comment ) )
			$comment = get_comment( $id );
		
		aal_insert_log( array(
			'action'         => $action,
			'object_type'    => 'Comments',
			'object_subtype' => get_post_type( $comment->comment_post_ID ),
			'object_name'    => get_the_title( $comment->comment_post_ID ),
			'object_id'      => $id,
		) );
	}
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.