My first step is but I was helped by it. I had a good old fashion pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me.) And then I did before I started my website, what I should have done. And here is where I want you to start. Learn how to protect learn the facts here now yourself until you get hacked. The thing about rename your login url to secure your wordpress website and why so many people recommend because it is easy to learn, it is. That can be a detriment to the health of our websites. We need reference to learn how to add a security fence.
I protect an access to important files on the blog's server by putting an index.html file in the particular directory, which hides the files from public view.
Is to delete the default administrator account. This is important because if you you could try here don't do it, malicious user know a user name that they could attempt to crack.
Now we are getting into things. Whenever you install WordPress, you need to edit the document config-sample.php and rename it to config.php. You need to install the database information there.
Just ensure which you can schedule, and you decide on a plugin that is current with the current version and release of WordPress, restore and clone.