Installing the fix wordpress malware Scan plugin will check all this for you, and alert you that you might have missed. Additionally, it will tell you that a user named"admin" exists. That is your user name. If you wish, you can follow a link and find directions for changing that name. I personally think that a strong password is good enough security, and because I followed those steps, there have been no attacks on the sites that I run.
I protect an access to important files on the site's server by placing an index.html file in the particular directory, that hides the files from public view.
I don't think there is a person out there that after learning just how much of a problem WordPress hacking is that it's a fantastic idea. However is that when it comes to securing their sites, Your Domain Name bloggers seem to be stuck in this state.
It is really sexy to fan the flames of fear. That's what journalists and bloggers and politicians and public figures do. It's great for readership and it brings money into the war chests. Balderdash.
Just make sure you choose a plugin that's current with the current version and release of WordPress, and that you can schedule, restore and replicate.