You may well have heard all the buzz online about the attacks on WordPress security. Unfortunately this is no joke, and it needs to be taken very seriously, or all you've built could be hijacked or worse, lost to you.
Install the fix wordpress malware protection Firewall Plugin. Quit and this plugin investigates requests to identify attacks that are obvious.
There are numerous ways to pull off this, and a lot of them involve re-establishing databases and much more and FTPing files, exporting and copying. Some of them are very complicated, so it's imperative that you select the one that is right. If you are not of the persuasion that is technical, then you might want to check into using a plugin for WordPress backups.
While it's an odd term, it represents a essential task: making a WordPress copy of your website to work on offline, or in the event something should go amiss. We're not simply being obsessive-compulsive here: servers go down every day, despite their claims of 99.9% uptime, and if you've had this happen to you, you know the fear is it article can cause.
Whitelists pathological-looking phrases and black based on which area they appear within. (unknown/numeric parameters vs. known post bodies, comment bodies, etc.).
Just make sure you decide on a plugin that's up to date with the version and release of WordPress, and that you can schedule, restore and replicate.