Keep headers/logos under 125 pixels high. It takes up valuable viewing space, especially for laptop users, that is best left for the good stuff to appear"above the fold" Take a cue from the big companies, simple logos done well say it all. This is our #1 pet peeve - screaming logos and headers!
Cloning your website is another level in fix hacked wordpress database that can be very useful. Cloning simply means that you have backed up your site to a completely different location, (offline, as in a folder, in order not to have SEO issues ) where you can access it at a moment's notice if the need arises.
After spending a few days and hitting a few spots around town, I eventually find a cafe that provides free, unsecured Wi-Fi and to my pleasure, there are a ton of folks sitting around daily connecting their laptops to the"free" Internet service. I use my handy dandy Wi-Fi cracker tool and website here sit down and log myself into people's computers. Remember, they are all on a shared network.
There's a section of config-sample.php that's headed"Authentication Unique Keys." There are four definitions that appear within the block. There is a hyperlink within that section of code. You want to enter that link in your browser, copy the contents which you return, and then replace the keys you have with the unique, pseudo-random keys provided by the site. This makes it harder for attackers to automatically generate a"logged-in" cookie for your site.
Install the WordPress Firewall Plugin. Stop and this plugin investigates web requests with WordPress-specific heuristics that are simple to recognize most obvious attacks.
There is another problem you have with WordPress. People always know where they can login and they also could just drop by your login form and try a different combination of user accounts and passwords outside. In order to prevent this from happening you want to install Login Lockdown. It's a plugin that only lets users try and login with a wrong password three times. After that the IP address will be banned from the server for a specific amount of time.