X-Pingback header sent despite disabled xml-rpc interface and trackbacks/pingbacks
|Reported by:||TobiasBg||Owned by:||anonymous|
|Severity:||normal||Keywords:||x-pingback, header, xml-rpc, trackback, pingback|
I have disabled (unchecked) the use of the XML-RPC interface under options -> writing, as well as the Atom protocol.
Additionally I have disabled pingbacks/trackbacks from other sites under options -> discussion.
Despite this, my WP 2.6 will send the following header (shortened the irrelevant data). Notice the X-pingback:
HTTP/1.1 200 OK Date: ... Server: ... X-Pingback: http://www.mysite.example/xmlrpc.php Content-Type: ...
After grep-ing my wordpress folder I found that this header is sent in the function WP->send_headers() in classes.php line 190.
Shouldn't that function check whether that header has to be sent?
(which shouldn't be the case when disabling the XML-RPC interface or trackbacks/pingbacks, right?)