As mentioned, there was a blacklist plugin that's actually supposed to catch a lot of the garbage. We're completed protected through the simple expedient of having completely breaken the ability to save changes. I don't know enough perl to figure out if it's a bad plugin or something local. I can't administer the site from work, and from home I've been more interested in going to the pool with the kids than working on a website.

Unless someone else has the time and desire to work on it sooner, I'll take a look sometime after Labor Day.