Index: fivestar.module =================================================================== RCS file: /cvs/drupal-contrib/contributions/modules/fivestar/fivestar.module,v retrieving revision 1.13.2.57 diff -u -r1.13.2.57 fivestar.module --- fivestar.module 10 May 2009 20:20:57 -0000 1.13.2.57 +++ fivestar.module 30 Jun 2009 22:56:37 -0000 @@ -992,17 +992,22 @@ } /** - * Get a private token used to protect links from spoofing - CSRF. + * Get a private token used to protect links from CSRF attacks. */ -function fivestar_get_token($seed) { - return drupal_get_token($seed); +function fivestar_get_token($value) { + global $user; + + // Anonymous users don't get a session ID, which breaks page caching. + $session_id = $user->uid ? session_id() : ''; + $private_key = drupal_get_private_key(); + return md5($session_id . $value . $private_key); } /** * Check to see if a token value matches the specified node. */ -function fivestar_check_token($token, $seed) { - return drupal_get_token($seed) == $token; +function fivestar_check_token($token, $value) { + return fivestar_get_token($value) == $token; } /**