Changeset 62417

Timestamp:

05/26/2026 12:17:59 AM (18 hours ago)

Author:

ramonopoly

Message:

Disable pings/trackbacks for local, development, and staging environments

When WP_ENVIRONMENT_TYPE is not production, disable pingbacks and trackbacks.

Otherwise, when WP_ENVIRONMENT_TYPE is local, development, or staging, pingbacks and trackbacks are sent when posts are published. This creates confusion on the receiving end and is unnecessary for testing workflows.

Props arcangelini, cagrimmett, ramonopoly, tyxla, khushipatel15.

Fixes #64837.

Location:

trunk

Files:

• src/wp-includes/comment.php (modified) (1 diff)
• src/wp-includes/default-filters.php (modified) (1 diff)
• tests/phpunit/tests/comment/disablePingsForEnvironment.php (added)

trunk/src/wp-includes/comment.php

@@ -3165 +3165 @@
 
 /**
+ * Determines whether pings should be disabled for the current environment.
+ *
+ * By default, all pings (outgoing pingbacks, trackbacks, and ping service
+ * notifications, as well as incoming pingbacks and trackbacks) are disabled
+ * for non-production environments ('local', 'development', 'staging').
+ *
+ * @since 7.1.0
+ *
+ * @return bool True if pings should be disabled, false otherwise.
+ */
+function wp_should_disable_pings_for_environment() {
+    $environment_type = wp_get_environment_type();
+    $should_disable   = 'production' !== $environment_type;
+
+    /**
+     * Filters whether pings should be disabled for the current environment.
+     *
+     * Returning false re-enables pings in non-production environments.
+     * Returning true disables pings even in production.
+     *
+     * @since 7.1.0
+     *
+     * @param bool   $should_disable  Whether pings should be disabled. Default true
+     *                                for non-production environments, false for production.
+     * @param string $environment_type The current environment type as returned by
+     *                                 wp_get_environment_type().
+     */
+    return apply_filters( 'wp_should_disable_pings_for_environment', $should_disable, $environment_type );
+}
+
+/**
+ * Removes outgoing ping callbacks in non-production environments.
+ *
+ * Hooked to `do_all_pings` at priority 1 so it runs before the default
+ * priority 10 callbacks. Does not remove `do_all_enclosures`.
+ *
+ * @since 7.1.0
+ */
+function wp_maybe_disable_outgoing_pings_for_environment() {
+    if ( wp_should_disable_pings_for_environment() ) {
+        remove_action( 'do_all_pings', 'do_all_pingbacks' );
+        remove_action( 'do_all_pings', 'do_all_trackbacks' );
+        remove_action( 'do_all_pings', 'generic_ping' );
+    }
+}
+
+/**
+ * Rejects incoming trackbacks in non-production environments.
+ *
+ * Hooked to `pre_trackback_post` which fires in `wp-trackback.php` before the
+ * trackback is processed. Calls `trackback_response()` which sends an XML error
+ * response and terminates the request.
+ *
+ * @since 7.1.0
+ */
+function wp_maybe_disable_trackback_for_environment() {
+    if ( wp_should_disable_pings_for_environment() ) {
+        trackback_response( 1, __( 'Trackbacks are disabled in non-production environments.' ) );
+    }
+}
+
+/**
+ * Removes the pingback XML-RPC method in non-production environments.
+ *
+ * @since 7.1.0
+ *
+ * @param string[] $methods An array of XML-RPC methods, keyed by their methodName.
+ * @return string[] Modified array of XML-RPC methods.
+ */
+function wp_maybe_disable_xmlrpc_pingback_for_environment( $methods ) {
+    if ( wp_should_disable_pings_for_environment() ) {
+        unset( $methods['pingback.ping'] );
+    }
+
+    return $methods;
+}
+
+/**
  * Pings back the links found in a post.
  *

trunk/src/wp-includes/default-filters.php

@@ -422 +422 @@
 add_action( 'do_all_pings', 'do_all_trackbacks', 10, 0 );
 add_action( 'do_all_pings', 'generic_ping', 10, 0 );
+
+// Disable pings (pingbacks, trackbacks, and ping service notifications) in non-production environments.
+add_action( 'do_all_pings', 'wp_maybe_disable_outgoing_pings_for_environment', 1, 0 );
+add_action( 'pre_trackback_post', 'wp_maybe_disable_trackback_for_environment', 10, 0 );
+add_filter( 'xmlrpc_methods', 'wp_maybe_disable_xmlrpc_pingback_for_environment' );
+
 add_action( 'do_robots', 'do_robots' );
 add_action( 'do_favicon', 'do_favicon' );