diff -x .svn -aruN 2.4.3.src/admin/footer.inc.php 2.4.4.src/admin/footer.inc.php
--- 2.4.3.src/admin/footer.inc.php	2008-09-29 14:55:33.000000000 -0500
+++ 2.4.4.src/admin/footer.inc.php	2009-02-19 22:03:07.000000000 -0600
@@ -1,3 +1,3 @@
-<center><font face="Arial, Helvetica, sans-serif" color="#CCCCCC" size="1"><b>Advanced Guestbook 2.4.3<br><a href="http://www.proxy2.de" target="_blank"><font color="#CCCCCC">http://www.proxy2.de</font></a></b></font></center>
+<center><font face="Arial, Helvetica, sans-serif" color="#CCCCCC" size="1"><b>Advanced Guestbook 2.4.4<br><a href="http://www.proxy2.de" target="_blank"><font color="#CCCCCC">http://www.proxy2.de</font></a></b></font></center>
 </body>
 </html>
diff -x .svn -aruN 2.4.3.src/doc/changelog.txt 2.4.4.src/doc/changelog.txt
--- 2.4.3.src/doc/changelog.txt	2008-09-29 14:55:32.000000000 -0500
+++ 2.4.4.src/doc/changelog.txt	2009-02-19 22:04:53.000000000 -0600
@@ -1,3 +1,7 @@
+Changelog for 2.4.4
+
+- fixed bug in add.class.php (reported by Carbonize)
+
 Changelog for 2.4.3
 
 - fixed some vulnerabilities when register_globals is turned on
diff -x .svn -aruN 2.4.3.src/doc/readme.txt 2.4.4.src/doc/readme.txt
--- 2.4.3.src/doc/readme.txt	2008-09-29 14:55:32.000000000 -0500
+++ 2.4.4.src/doc/readme.txt	2009-02-19 22:03:05.000000000 -0600
@@ -1,4 +1,4 @@
-Advanced Guestbook 2.4.3 (PHP/MySQL)
+Advanced Guestbook 2.4.4 (PHP/MySQL)
 Copyright (c) Chi Kien Uong
 URL: http://www.proxy2.de
 
diff -x .svn -aruN 2.4.3.src/lib/add.class.php 2.4.4.src/lib/add.class.php
--- 2.4.3.src/lib/add.class.php	2008-09-29 14:55:32.000000000 -0500
+++ 2.4.4.src/lib/add.class.php	2009-02-19 22:03:05.000000000 -0600
@@ -1,7 +1,7 @@
 <?php
 /**
  * ----------------------------------------------
- * Advanced Guestbook 2.4.3 (PHP/MySQL)
+ * Advanced Guestbook 2.4.4 (PHP/MySQL)
  * Copyright (c) Chi Kien Uong
  * URL: http://www.proxy2.de
  * ----------------------------------------------
@@ -150,6 +150,62 @@
                 return $this->db->gb_error($this->db->LANG["ErrorPost8"]);
             }
         }
+        $this->name = $this->db->FormatString($this->name);
+        $this->location = $this->db->FormatString($this->location);
+        $this->comment = $this->db->FormatString($this->comment);
+        $this->icq = intval($this->db->FormatString($this->icq));
+        $this->aim = htmlspecialchars($this->db->FormatString($this->aim));
+        if ($this->icq < 1000 || $this->icq >999999999) {
+            $this->icq = 0;
+        }
+        if ($this->name == "") {
+            return $this->db->gb_error($this->db->LANG["ErrorPost1"]);
+        } elseif (strlen($this->comment)<$this->db->VARS["min_text"] || strlen($this->comment)>$this->db->VARS["max_text"]) {
+            return $this->db->gb_error($this->db->LANG["ErrorPost3"]);
+        } else {
+            $this->url = trim($this->url);
+            $this->email = trim($this->email);
+            if (!eregi("^[_a-z0-9-]+(\\.[_a-z0-9-]+)*@([0-9a-z][0-9a-z-]*[0-9a-z]\\.)+[a-z]{2,5}$", $this->email) ) {
+                $this->email = '';
+            }
+            if (!eregi("^http://[_a-z0-9-]+\\.[_a-z0-9-]+", $this->url)) {
+                $this->url = '';
+            }
+            if (htmlspecialchars($this->url) != "$this->url") {
+                $this->url = '';
+            }
+        }
+        if ($this->db->VARS["censor"]==1) {
+            $this->name = $this->db->CensorBadWords($this->name);
+            $this->location = $this->db->CensorBadWords($this->location);
+            $this->comment = $this->db->CensorBadWords($this->comment);
+        }
+        if (!$this->db->CheckWordLength($this->name) || !$this->db->CheckWordLength($this->location)) {
+            return $this->db->gb_error($this->db->LANG["ErrorPost4"]);
+        }
+        if (!$this->db->CheckWordLength($this->comment)) {
+            return $this->db->gb_error($this->db->LANG["ErrorPost10"]);
+        }
+        if ($this->canUseCaptcha) {
+        	if ($this->token == '' || $this->gb_captcha == '') {
+        		return $this->db->gb_error($this->db->LANG["ErrorPost4"]);
+        	}
+        	if (get_magic_quotes_gpc()) {
+        		$this->gb_captcha = stripslashes($this->gb_captcha);
+        	}
+        	$gb_captcha = strtoupper($this->gb_captcha);
+
+        	$res = $this->db->query("SELECT validate_key FROM {$this->table['cap']} WHERE session_id = '".addslashes($this->token)."'");
+        	$result = $this->db->fetch_array($res);
+        	if ($result == false || $result['validate_key'] == "" || $gb_captcha == "") {
+        		return $this->db->gb_error($this->db->LANG["ErrorPost4"]);
+        	}
+
+        	$result['validate_key'] = strtoupper($result['validate_key']);
+        	if ($result['validate_key'] != $gb_captcha) {
+        		return $this->db->gb_error($this->db->LANG["ErrorPost4"]);
+        	}
+    	}
         if (is_array($this->userfile) && $this->userfile["userfile"]["tmp_name"] != "none" && (filesize($this->userfile["userfile"]["tmp_name"])>0)) {
             $uploaded_img_file_stat = $this->is_uploaded_file_readable($this->userfile["userfile"]["tmp_name"]);
         } else {
@@ -213,62 +269,6 @@
         if (!empty($this->user_img)) {
             $this->image_file = trim($this->user_img);
         }
-        $this->name = $this->db->FormatString($this->name);
-        $this->location = $this->db->FormatString($this->location);
-        $this->comment = $this->db->FormatString($this->comment);
-        $this->icq = intval($this->db->FormatString($this->icq));
-        $this->aim = htmlspecialchars($this->db->FormatString($this->aim));
-        if ($this->icq < 1000 || $this->icq >999999999) {
-            $this->icq = 0;
-        }
-        if ($this->name == "") {
-            return $this->db->gb_error($this->db->LANG["ErrorPost1"]);
-        } elseif (strlen($this->comment)<$this->db->VARS["min_text"] || strlen($this->comment)>$this->db->VARS["max_text"]) {
-            return $this->db->gb_error($this->db->LANG["ErrorPost3"]);
-        } else {
-            $this->url = trim($this->url);
-            $this->email = trim($this->email);
-            if (!eregi("^[_a-z0-9-]+(\\.[_a-z0-9-]+)*@([0-9a-z][0-9a-z-]*[0-9a-z]\\.)+[a-z]{2,5}$", $this->email) ) {
-                $this->email = '';
-            }
-            if (!eregi("^http://[_a-z0-9-]+\\.[_a-z0-9-]+", $this->url)) {
-                $this->url = '';
-            }
-            if (htmlspecialchars($this->url) != "$this->url") {
-                $this->url = '';
-            }
-        }
-        if ($this->db->VARS["censor"]==1) {
-            $this->name = $this->db->CensorBadWords($this->name);
-            $this->location = $this->db->CensorBadWords($this->location);
-            $this->comment = $this->db->CensorBadWords($this->comment);
-        }
-        if (!$this->db->CheckWordLength($this->name) || !$this->db->CheckWordLength($this->location)) {
-            return $this->db->gb_error($this->db->LANG["ErrorPost4"]);
-        }
-        if (!$this->db->CheckWordLength($this->comment)) {
-            return $this->db->gb_error($this->db->LANG["ErrorPost10"]);
-        }
-        if ($this->canUseCaptcha) {
-        	if ($this->token == '' || $this->gb_captcha == '') {
-        		return $this->db->gb_error($this->db->LANG["ErrorPost4"]);
-        	}
-        	if (get_magic_quotes_gpc()) {
-        		$this->gb_captcha = stripslashes($this->gb_captcha);
-        	}
-        	$gb_captcha = strtoupper($this->gb_captcha);
-
-        	$res = $this->db->query("SELECT validate_key FROM {$this->table['cap']} WHERE session_id = '".addslashes($this->token)."'");
-        	$result = $this->db->fetch_array($res);
-        	if ($result == false || $result['validate_key'] == "" || $gb_captcha == "") {
-        		return $this->db->gb_error($this->db->LANG["ErrorPost4"]);
-        	}
-
-        	$result['validate_key'] = strtoupper($result['validate_key']);
-        	if ($result['validate_key'] != $gb_captcha) {
-        		return $this->db->gb_error($this->db->LANG["ErrorPost4"]);
-        	}
-    	}
     	return 1;
     }
 
diff -x .svn -aruN 2.4.3.src/lib/admin.class.php 2.4.4.src/lib/admin.class.php
--- 2.4.3.src/lib/admin.class.php	2008-09-29 14:55:32.000000000 -0500
+++ 2.4.4.src/lib/admin.class.php	2009-02-19 22:03:05.000000000 -0600
@@ -1,7 +1,7 @@
 <?php
 /**
  * ----------------------------------------------
- * Advanced Guestbook 2.4.3 (PHP/MySQL)
+ * Advanced Guestbook 2.4.4 (PHP/MySQL)
  * Copyright (c) Chi Kien Uong
  * URL: http://www.proxy2.de
  * ----------------------------------------------
diff -x .svn -aruN 2.4.3.src/lib/bitmapimagetext.class.php 2.4.4.src/lib/bitmapimagetext.class.php
--- 2.4.3.src/lib/bitmapimagetext.class.php	2008-09-29 14:55:32.000000000 -0500
+++ 2.4.4.src/lib/bitmapimagetext.class.php	2009-02-19 22:03:05.000000000 -0600
@@ -1,7 +1,7 @@
 <?php
 /**
  * ----------------------------------------------
- * Advanced Guestbook 2.4.3 (PHP/MySQL)
+ * Advanced Guestbook 2.4.4 (PHP/MySQL)
  * Copyright (c) Chi Kien Uong
  * URL: http://www.proxy2.de
  * ----------------------------------------------
diff -x .svn -aruN 2.4.3.src/lib/captcha.class.php 2.4.4.src/lib/captcha.class.php
--- 2.4.3.src/lib/captcha.class.php	2008-09-29 14:55:32.000000000 -0500
+++ 2.4.4.src/lib/captcha.class.php	2009-02-19 22:03:05.000000000 -0600
@@ -1,7 +1,7 @@
 <?php
 /**
  * ----------------------------------------------
- * Advanced Guestbook 2.4.3 (PHP/MySQL)
+ * Advanced Guestbook 2.4.4 (PHP/MySQL)
  * Copyright (c) Chi Kien Uong
  * URL: http://www.proxy2.de
  * ----------------------------------------------
diff -x .svn -aruN 2.4.3.src/lib/comment.class.php 2.4.4.src/lib/comment.class.php
--- 2.4.3.src/lib/comment.class.php	2008-09-29 14:55:32.000000000 -0500
+++ 2.4.4.src/lib/comment.class.php	2009-02-19 22:03:05.000000000 -0600
@@ -1,7 +1,7 @@
 <?php
 /**
  * ----------------------------------------------
- * Advanced Guestbook 2.4.3 (PHP/MySQL)
+ * Advanced Guestbook 2.4.4 (PHP/MySQL)
  * Copyright (c) Chi Kien Uong
  * URL: http://www.proxy2.de
  * ----------------------------------------------
diff -x .svn -aruN 2.4.3.src/lib/gb.class.php 2.4.4.src/lib/gb.class.php
--- 2.4.3.src/lib/gb.class.php	2008-09-29 14:55:32.000000000 -0500
+++ 2.4.4.src/lib/gb.class.php	2009-02-19 22:03:05.000000000 -0600
@@ -1,7 +1,7 @@
 <?php
 /**
  * ----------------------------------------------
- * Advanced Guestbook 2.4.3 (PHP/MySQL)
+ * Advanced Guestbook 2.4.4 (PHP/MySQL)
  * Copyright (c) Chi Kien Uong
  * URL: http://www.proxy2.de
  * ----------------------------------------------
diff -x .svn -aruN 2.4.3.src/lib/image.class.php 2.4.4.src/lib/image.class.php
--- 2.4.3.src/lib/image.class.php	2008-09-29 14:55:32.000000000 -0500
+++ 2.4.4.src/lib/image.class.php	2009-02-19 22:03:05.000000000 -0600
@@ -1,7 +1,7 @@
 <?php
 /**
  * ----------------------------------------------
- * Advanced Guestbook 2.4.3 (PHP/MySQL)
+ * Advanced Guestbook 2.4.4 (PHP/MySQL)
  * Copyright (c) Chi Kien Uong
  * URL: http://www.proxy2.de
  * ----------------------------------------------
diff -x .svn -aruN 2.4.3.src/lib/mysql.class.php 2.4.4.src/lib/mysql.class.php
--- 2.4.3.src/lib/mysql.class.php	2008-09-29 14:55:32.000000000 -0500
+++ 2.4.4.src/lib/mysql.class.php	2009-02-19 22:03:05.000000000 -0600
@@ -1,7 +1,7 @@
 <?php
 /**
  * ----------------------------------------------
- * Advanced Guestbook 2.4.3 (PHP/MySQL)
+ * Advanced Guestbook 2.4.4 (PHP/MySQL)
  * Copyright (c) Chi Kien Uong
  * URL: http://www.proxy2.de
  * ----------------------------------------------
diff -x .svn -aruN 2.4.3.src/lib/phrase.class.php 2.4.4.src/lib/phrase.class.php
--- 2.4.3.src/lib/phrase.class.php	2008-09-29 14:55:32.000000000 -0500
+++ 2.4.4.src/lib/phrase.class.php	2009-02-19 22:03:05.000000000 -0600
@@ -1,7 +1,7 @@
 <?php
 /**
  * ----------------------------------------------
- * Advanced Guestbook 2.4.3 (PHP/MySQL)
+ * Advanced Guestbook 2.4.4 (PHP/MySQL)
  * Copyright (c) Chi Kien Uong
  * URL: http://www.proxy2.de
  * ----------------------------------------------
diff -x .svn -aruN 2.4.3.src/lib/session.class.php 2.4.4.src/lib/session.class.php
--- 2.4.3.src/lib/session.class.php	2008-09-29 14:55:32.000000000 -0500
+++ 2.4.4.src/lib/session.class.php	2009-02-19 22:03:05.000000000 -0600
@@ -1,7 +1,7 @@
 <?php
 /**
  * ----------------------------------------------
- * Advanced Guestbook 2.4.3 (PHP/MySQL)
+ * Advanced Guestbook 2.4.4 (PHP/MySQL)
  * Copyright (c) Chi Kien Uong
  * URL: http://www.proxy2.de
  * ----------------------------------------------
diff -x .svn -aruN 2.4.3.src/lib/template.class.php 2.4.4.src/lib/template.class.php
--- 2.4.3.src/lib/template.class.php	2008-09-29 14:55:32.000000000 -0500
+++ 2.4.4.src/lib/template.class.php	2009-02-19 22:03:05.000000000 -0600
@@ -1,7 +1,7 @@
 <?php
 /**
  * ----------------------------------------------
- * Advanced Guestbook 2.4.3 (PHP/MySQL)
+ * Advanced Guestbook 2.4.4 (PHP/MySQL)
  * Copyright (c) Chi Kien Uong
  * URL: http://www.proxy2.de
  * ----------------------------------------------
diff -x .svn -aruN 2.4.3.src/lib/vars.class.php 2.4.4.src/lib/vars.class.php
--- 2.4.3.src/lib/vars.class.php	2008-09-29 14:55:32.000000000 -0500
+++ 2.4.4.src/lib/vars.class.php	2009-02-19 22:03:05.000000000 -0600
@@ -1,7 +1,7 @@
 <?php
 /**
  * ----------------------------------------------
- * Advanced Guestbook 2.4.3 (PHP/MySQL)
+ * Advanced Guestbook 2.4.4 (PHP/MySQL)
  * Copyright (c) Chi Kien Uong
  * URL: http://www.proxy2.de
  * ----------------------------------------------
diff -x .svn -aruN 2.4.3.src/misc/update_db.php 2.4.4.src/misc/update_db.php
--- 2.4.3.src/misc/update_db.php	2008-09-29 14:55:33.000000000 -0500
+++ 2.4.4.src/misc/update_db.php	2009-02-19 22:03:01.000000000 -0600
@@ -46,7 +46,7 @@
 $result = $db->fetch_array($res);
 
 if ($result == false) {
-	echo "Updating db from 2.3.x to 2.4.3 \n\n";
+	echo "Updating db from 2.3.x to 2.4.4 \n\n";
 	for ($i=0; $i<count($sqlquery); $i++) {
 		$db->query($sqlquery[$i]);
 		echo " - $sqlquery[$i]\n";
diff -x .svn -aruN 2.4.3.src/templates/footer.php 2.4.4.src/templates/footer.php
--- 2.4.3.src/templates/footer.php	2008-09-29 14:55:33.000000000 -0500
+++ 2.4.4.src/templates/footer.php	2009-02-19 22:03:07.000000000 -0600
@@ -1,3 +1,3 @@
-<center><b><font face="Arial, Helvetica, sans-serif" color="#CCCCCC" size="1"><a href="http://www.proxy2.de" target="_blank"><font color="#CCCCCC" size="1">Advanced Guestbook 2.4.3</font></a></font></b></center>
+<center><b><font face="Arial, Helvetica, sans-serif" color="#CCCCCC" size="1"><a href="http://www.proxy2.de" target="_blank"><font color="#CCCCCC" size="1">Advanced Guestbook 2.4.4</font></a></font></b></center>
 </body>
 </html>
