I found that rather than deleting my player.dat file, I type into the server console "/tp <my player name> <friend's player name>" and I hit enter on that as soon as I click login. It appears to break the cycle and allows me to continue playing.
Still cannot ride a horse though.
@Nuxas,
How does one go about blocking the AttachEntity and EntityMetadata?