Along with other good advice in here. You may want to consider locking down access to certain files/directories with .htaccess files so that only specific IP's can get to them.
<FilesMatch wp-login.php>
Order deny,allow
Allow from your.ip.goes.here
Deny from all
</FilesMatch>
# protect wpconfig.php
<Files wp-config.php>
order allow,deny
deny from all
</Files>
# protect the htaccess file
#<files .htaccess>
#order allow,deny
#deny from all
#</files>
# disable directory browsing
Options All -Indexes
Edit: I see Achmed was just pointing this info out for you.
|