"you call webjunk a troll, yet what the hec are you?"
Not a troll. (I can't believe a moderator just said, 'I know you are, but what am I?' - Even more ironic: I just got trolled by a moderator.)
"webjunk asked a legitimate question"
No. Webjunk asked a question that is neither here nor there. All the legitimate questions were answered in my post (all except the one that was asked, right?).
A person who's answer to everything is 'we need more info' states clearly the fact 'I do not know'. If a person has no answer, why do they reply to questions at all (other than that whole 'getting attention' thing)?
If I am looking to help people and all I find are questions that I have no answers for, I either look them up or leave them alone. How hard is that? Worst case scenario, I gain new knowledge (that's gotta suck. I mean, being able to answer the question next time it comes up; screw that.).
"so do you want to answer the question or do you want to just go away?"
Great lead in for this next part!
I'm no PHP expert, either, but I think it's safe to assume that you, at least, read the question. That's how experts are made; by reading the post, not just pasting a default reply.
Your example code shows variables being filled in your header.php file. If I were to write the exact same code into the exact same location, it would not work. If I were to put that same code in any other location, it still wouldn't work.
I seem to remember this stuff working before; maybe in WP 2.9. I could be wrong on the version. Could it be a security feature added since WP 3?
Which brings up another idea. I'm using an analytics application on one of my sites that doubles as an anti-hacker tool (Crawl Track). On a few pages, I check the referring URL by the GET method.
<?php $ref = isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : ''; ?>
But this program sees that as a code injection. Could WordPress maybe have a defense mechanism like this in place?