I don't know about you, but when I first secured my WordPress site, and I researched to see what others do to keep their blog secure, I found information that I was confused. And some of the data was actually on the top or superstitious. People told me to rename this file, rename this folder and install these ten plugins. It appeared to be quite a lot of effort and work.
I back my blogs using a plugin WP DB Backup up. I can restore my website to the settings if anything happens. I use WP Security Scan plugin that is free to scan my blog and requests to be blocked by WordPress Firewall to fix hacked wordpress database.
This is fantastic news as it means that there is a strong community of developers and users that can further enhance the platform. However there is a group there will always be people who will try to take them down.
Move your wp-config.php file up one directory from the WordPress root. WordPress will look see this site for it if it cannot be found in the main directory. Additionally, nobody look at here will have the ability to read the file unless they've FTP or SSH access.
Upgrade today, if you're not currently running the latest version of WordPress. Like keeping your door unlocked when you leave for vacation, leaving your site on an old version is.
There are always going to be risks being online (or even just being alive!) Also it's easy to get caught up in the fear. We put the breaks on As soon as we get caught up in the panic. This isn't a good reaction. Take some common sense precautions, then forge ahead. It will need to be addressed then, if something bad does happen and no amount of quaking in your will have helped. If nothing does, all is good and you haven't made yourself sick with worry.