add missing table prefix in queries + reduce some "generous" identations
remove superfluous round brackets

fix a SQL injection vulnerability
Merge pull request #91 from Thoronador/fix-comments-list

Fix queries for comments list and remove superfluous brackets