how to fix hacked wordpress site Watch out form submissions. You can useRegexp to process the data . You can even define preloaded factors as type data in the form of checkboxes, radiobuttons etc..
Backup plug-ins is also significant. You want to backup database and all the files so in case of a sudden attack, you can bring back your blog like nothing.
Keep your WordPress Installation up to date - One of the easiest and most valuable tasks you can do yourself is to make sure your WordPress installation is updated. WordPress provides you a notice in your dashboard, so there's really no reason.
Note that this last step for new installations should only try. You have to change of the table names inside the database, if you would like to get it done for installations.
I prefer using a WordPress plugin to get the job More Info done. Just make sure the plugin you select is able to do backups, has restore and can replicate. Be sure it is often updated to keep pace with all new versions of WordPress. There is no use in backing your data up to a plugin that's out of date, and not functioning.