vphoner - 4:11 am on Jul 8, 2011 (gmt 0)
I did notice that that according to the paths in my log file, only wordpress posts get the readme.php called after they load. Pages or tag pages do not get the call to readme.php. I don't have a sessionbroker.php (searched for it). The strange thing is that I see no changes on the site or hidden links/spam. Nothing that I can see. Checked the source code of many pages using the browser window show source.