How to prevent your WordPress website from getting hacked like a PRO

After Reading all comments, I think blogspot is better than wp

guys pls I need your help.
the CC in inmotion has no solution to my issue. instead, they Quarantined all my websites and the result is the attached file. however, I am certain that the backup I have on onedrive might be affected too.

what should I do to recover the site from (index of /) on all the websites?

i am confused now

emmsana said:

Bro can you explain the setup of iThemes security + BBQ Firewall?

Or refer to the YouTube video you followed.
Thank you

Click to expand...

Shure! this is the video

emmsana said:

guys pls I need your help.
the CC in inmotion has no solution to my issue. instead, they Quarantined all my websites and the result is the attached file. however, I am certain that the backup I have on onedrive might be affected too.

what should I do to recover the site from (index of /) on all the websites?

i am confused now

Click to expand...

Before Babiato I used to download themes and plugins from several sites like JoJo Themes. One in particular The WordPress Vault or something similar has malware inside LearnDash plugins and infected my site and other sites. I recreate all the site from 0. I´m not finding a solution to delete the malware and repair that WordPress installation.

After Babiato I only work whit stuff member share here. I love this community all work perfectly. I recommend you start fresh with that site. Before that, you can try to identify what plugins have the malware.

The security plugins in my experience work fine to prevent infections, but not for clean infected sites. I whish you good luck!

Escanor64 said:

I don't agree with the bulk of your submission. "Manually" isn't a bad idea but when there is a frequency to changing that, then it is recommended to use a security plugin that handles your core security. VPS can't exactly save a WordPress website from getting hacked. WordPress is the most used CMS in the world and its sheer use means you'll be drawn to hackers and loopholes.

VPS use won't save you from getting hacked on WordPress.

Click to expand...

You are wrong. Try to do bad pratice in the server and use security plugins you will see. The target always will be the server.

Most people have issues with that. Thinks that security plugins are a "Bulletproof" against any attack vector. With is fake!

Why using a plugin to change your core settings when you can change key salt easily and without plugin needed? Wasting resources and creating another issues.

Do you think security plugins doesn't have also vulnerabilities? Of course it have.

If you do good pratice in your server what can be hacked is WordPress only not the server. Guess what happen? If you have sensible information in the server nothing will be available at all.

TylerD said:

Before Babiato I used to download themes and plugins from several sites like JoJo Themes. One in particular The WordPress Vault or something similar has malware inside LearnDash plugins and infected my site and other sites. I recreate all the site from 0. I´m not finding a solution to delete the malware and repair that WordPress installation.

After Babiato I only work whit stuff member share here. I love this community all work perfectly. I recommend you start fresh with that site. Before that, you can try to identify what plugins have the malware.

The security plugins in my experience work fine to prevent infections, but not for clean infected sites. I whish you good luck!

Click to expand...

This is a good text for those who thinks security plugins will save it.

Just don't use many plugins and avoid that! Use clean backups and start again without nulled plugins from some bad sources...