[ragtek]

Some things, which should be fixed:

PHP Code:

define('NO_REGISTER_GLOBALS', 1);  // not needed since 3.5
define('THIS_SCRIPT', 'guestbook');
define('THIS_SCRIPT', 'foobar');         
define('CSRF_SKIP_LIST', 'guestbook'); 
define('CSRF_SKIP_LIST', 'foo,bar');  
// THIS_SCRIPT & CSRF_SKIP_LIST 2 times;)
// comes from a example page or?*g* 


You don't need csrf_skip_list, because you don't have a action called 'guestbook'