Recovering a WordPress Site From a Spam Attack, Remotely, With Just a Terminal

A client’s WordPress site had quietly published over 30,000 spam posts, 600 more arriving every day, and he hadn’t written a single one. Here’s how I cleaned it up and locked it down from a terminal on the other side of the world.