Well, just like any POST hook, you only get the return of the function as input to your hooked function. For validate_review, it doesn't actually return anything, so you get undef. Either you parse $IN for the info you need (won't work in this situation), or you set up a PRE hook to grab the input you need.
Adrian
Adrian