Index: includes/actions/WatchAction.php =================================================================== --- includes/actions/WatchAction.php (revision 630) +++ includes/actions/WatchAction.php (revision 631) @@ -66,8 +66,8 @@ $this->checkCanExecute( $user ); // Must have valid token for this action/title - $salt = array( $this->getName(), $this->getTitle()->getDBkey() ); - + $salt = array( $this->getName(), $this->getTitle()->getPrefixedDBkey() ); + if ( $user->matchEditToken( $this->getRequest()->getVal( 'token' ), $salt ) ) { $this->onSubmit( array() ); $this->onSuccess();