Forum Moderators: mack
Use a database to store your comments, and call up the results from the database using mysql_query.
Validating form fields isn't too difficult either, as long as you know what your trying to prevent then its ok. Namely sql injections are the things you want to avoid and also using your forms as a spam email form.
:)