fix wordpress malware cleanup will inform you that there's no htaccess inside the directory. You can place a.htaccess record into this directory if you want, and you can use it to handle the wp-admin directory from Ip Address address or address range. Details of how you can do that are plentiful around the net.
Backup plug-ins is also significant. You need to backup database official site and all the files you can bring your own blog back like nothing.
Move your wp-config.php file one directory up from the WordPress Continue root. WordPress will look for it there if it can't be found in the root directory. Additionally, nobody will be able to read the document unless they have FTP or SSH access.
As I (our fictitious Joe the Hacker) know, people have way too many usernames and passwords to remember. You have got Twitter, Facebook, your online banking, LinkedIn, click this site two site logins, FTP, web hosting, etc. accounts which all come with logins and passwords you need to remember.
Don't use wp_. Web hosting providers are removing that default but if yours doesn't, adjust wp_ to anything but that.