Keep headers/logos under 125 pixels high. It takes up valuable viewing space, especially for laptop users, that is best left for the good stuff to appear"above the fold." Take a cue from the big companies, simple logos done well say it all. This is our #1 pet peeve - screaming logos and headers!
My first step is but I was helped by it. I had a good old fashion pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me.) And then I did what I should have done before I even started my website. And here is where I want you to start also. Learn how to protect yourself until you get hacked. The beautiful thing about fix hacked wordpress database and official website why so many people recommend it is because it is really easy to learn. Unfortunately, that can also be a detriment to the health of our websites. We need to learn how to put in a security fence.
Strong passwords - Do what Home Page you can to use a password, alpha-numeric, with upper and lower case and special characters. Easy to remember passwords are easy to guess!
Maintain control of your assets that are online - Nothing is worse than having your livelihood in somebody else's hands. Why take chances with something as important as your website?
Black and phrases that were whitelists based on which area they look inside. (unknown/numeric parameters vs. known post bodies, remark bodies, etc.).
Oh . And by the directory way, I was talking about plugins. Make sure it's a safe one, when you get a new plugin. Don't install any plugin simply because the owner is saying that plugin can help you do this or that. Use get a software engineer to analyze it carefully, or perhaps a test site to look at the plugin. This way you'll know it is not a threat for your organization or you.