I was helped by it although my first step is. I had a good old style pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me) And then I did before I started my site, what I should have done. And here is where I want you to start. Learn hacked. The attractive thing about how to fix hacked wordpress and why so many people recommend it is because it is easy to learn. That can be a detriment to the health of our websites. We have to learn how to add a safety fence around our website.
Truth is, there is really no way to prevent an intrusion if your own website is targeted by a capable master of this script. Everything you are about to read below are some precautionary website link actions you can take to minimize the risk. Odds are a hacker would prefer picking more easy victim, another if your WordPress site is well protected.
Move your wp-config.php file up one directory from the WordPress root. WordPress will look for it if it can't be found in the main directory. Also, nobody else will have the ability to read the document unless they have SSH or FTP access.
Now we are getting into matters. You must rename it to config.php and modify the file config-sample.php, when you install WordPress. You need to deploy the database facts there.
Those are three simple things you can do to keep WordPress safe without plugins. Put a blank Index.html file in your folders, run your web host security scan and backup your whole account.