I’m not assuming WordPress is the problem. But I am assuming I’m not the first person to have a WordPress blog hacked. I discovered an entry in the wp database that allowed php files to be uploaded, and deleted that. I’m guessing the two tlz*.php files were the culprit, and I deleted them. But I’m not assuming I’m safe yet.
