how to fix hacked wordpress site Watch out form entries. You may usethe data to be processed by Regexp from forms. You can also define preloaded variables as form data in the form of checkboxes, radiobuttons etc..
The one I recommend, and the approach, is to use one of the generation and storage plugins available for your browser. RoboForm is liked by many people, but I believe after a trial period, you have to pay for it. I use the free version of Lastpass, and I recommend it for those of you who use Firefox or Internet Explorer. That will generate secure passwords for you; you use one master password to log in.
Keep your WordPress Installation up to date - One of the simplest and most valuable tasks you can do yourself is to ensure that your WordPress installation is updated. WordPress gives you a notice in your dashboard, so there's really no reason to pop over to these guys not do this.
Along with adding a secret key to your wp-config.php document, also think about altering your user password to something that is strong and unique. A great tip is to avoid common phrases, use letters, and include amounts, although you will be told the strength of your password by wordPress. It's also a good idea to change your password regularly - say once.
Oh . And incidentally, I was talking about plugins. When you get a new plugin, make sure it's a secure one. Don't install any plugin simply because the owner is saying on his site that plugin can help you do this or that. Use maybe, or a test site to check the plugin get a software engineer to analyze it carefully. This way is not a threat for your organization or you.