Link farming content inserted via wp-comments-post by POST from 'Googlebot'

Hi Forum. My blog was hosting some parasitic content that may have been inserted via wp-comments-post.php – somehow a directory (.tmpbz) of content had been created in my WordPress document root which implemented (with a combination of rewrite rules in a .htaccess file and a clever index.php) a compressed filesystem containing what looks like link-farming content.

I applied some sticking plasters to disable the content and (maybe) prevent the same kind of access again, but I’d appreciate someone more knowledgeable than me having a look at the issue. I couldn’t find another site mentioning the issue, so I wrote an article here:

https://blog.lolyco.com/sean/2012/07/18/wordpress-comments-post-googlebot-slike-za-facebook/

I added an URL (not anchored, it seemed counter-productive!) for a page that seems to list affected sites. The page is 10MB of URLs, so there are plenty of affected WP sites out there.