view and dataobject for comments
security on comment loading

(check user access before retrieving from db)
PDO stuff for comment loading
swap to use pdo call