Backup is easy enough to script out. Two scripts (running via cron) to get your whole Wordpress site backed up nightly.
Dump your Wordpress Database
Code:
wpdlog-db-backup.sh
#!/bin/sh
cd /backup/wordpress-dlog
mysqldump -u dbuser -dbpassword --databases dlogdb | gzip > dlogdb-backup-`date +%H%M_%m%d`.sql.gz
Archive your Wordpress Files (all of them)
Code:
wpdlog-file-backup.sh
#!/bin/sh
cd /backup/wordpress-dlog
tar -zcvf dlog-backup-`date +%H%M_%m%d`.tar.gz /www/dlog
Run those two scripts via cron
Code:
40 0 * * * /usr/local/bin/wpdlog-db-backup.sh >/dev/null 2&>1
40 2 * * 5 /usr/local/bin/wpdlog-file-backup.sh >/dev/null 2&>1
Keep all the scripts and the location of the backups in a folder that DOES NOT face the public.
Then use the backup method of your choice (we use RSYNC) to move the backup files to OFF-System storage.
The reason for the two steps (backup to local folder, THEN move to off-system storage) is to minimize the backup time. Quicker to make the backups locally, then move at your leisure.
As to securing Wordpress - install a plugin to enforce strong user passwords, and then use .htaccess to protect the admin page. And of course keep everything, wordpress and all your plugins, up to date ALWAYS.
_________________
Either provide enough details for people to help, or sit back and listen to the
crickets chirp.
Security thru obscurity is a myth - and really really annoying.