fix hacked wordpress Watch out form entries. You can useRegexp to process the data from forms. You can also define preloaded variables as type data in the form of checkboxes, radiobuttons etc..
An easy way would be to use a few tools. To begin with, do not allow people run you could try these out a web host security scan, to list the files in your folders and automatically backup your whole web hosting account.
Yes, you need to do regular backups look at this website of your website. I recommend at least a weekly database backup and a monthly "full" backup. More. Definitely if you make frequent additions and changes to your site. If you make changes multiple times a day, or have a community of people which are in there all the time, a daily backup should be a minimum.
Now we're getting into matters. You more must rename it to config.php and alter the document config-sample.php, when you install WordPress. You will need to set up the database facts there.
Just ensure you decide on a plugin that is up to date with the current version and release of WordPress, and that you can schedule, restore and replicate.