fix wordpress malware attack will also tell you that there's not any htaccess in the directory. You may put a.htaccess file into this directory if you desire, and you can use it to control access to the directory or address range. Details of how to do that are easily available on the internet.
Use strong passwords - Do what you can to use a strong password, alpha-numeric, with upper and lower case and special characters. Easy to remember passwords his response are easy to guess!
It represents a task that is essential while it's an odd term : making a WordPress copy of your site to work on offline, or in the event something should go amiss. We're not only being obsessive-compulsive here: servers go down every day, despite website here their claims of 99.9% uptime, and if you've had this happen to you, you know the fear is it can cause.
Now we are getting into matters. You have to rename it to config.php and alter the file config-sample.php, when you install WordPress. You will need to deploy the database facts there.
Implementing all the above will probably take less than an hour to complete, while creating your WordPress website much more resistant to intrusions. Over 1 million WordPress sites were cracked this past year, mainly due to preventable security gaps. Have yourself prepared and you're likely to be on the safe side.