How I stopped a massive WordPress spam attack with 4,700 lines of code in two days - thanks to Codex and Claude

The article describes a weekend incident where automated registration spam flooded a WordPress site—creating ~39,000 accounts and ~700,000 user-meta records—by bypassing existing controls; the site owner used AI assistants (Claude and Codex) to identify eight bypasses, add CAPTCHAs and detection signals across all registration paths, and run a multi-stage cleanup that removed ~15,000 accounts and ~275,000 meta records, restoring service.