I just realized something. When you're using Mollom to protect your site from spam, for the correct workflow to happen, i.e. visitors comments show up immediately if they are not considered spam, you'll want to set your comment permissions as follows:

A pretty simple yet cool feature of Drupal's db_query() function is that you can pass in parameters that will make it automatically adjust the query to correctly escape the arguments. This is one of the simple security features in Drupal as it will properly escape the string to avoid SQL injection attacks, and just simply safe you hassle. Good stuff!