You may well have heard all the buzz online about the attacks on WordPress security. Unfortunately this is no joke, and it needs to be taken very seriously, or all you've built could be hijacked or worse, lost to you.
I back up my blogs regularly using a free plugin WP DB Backup. I can restore my website to the last 13, if anything happens. I use my site to be scanned by WP Security Scan plugin that is free regularly and WordPress Firewall to block requests that are suspicious-looking to fix hacked wordpress database.
Also, don't make the mistake of believing that your web host will have your back as far as WordPress backups go. Not always. While they say that they do, it's been my experience that the company may or may not be doing backups. Take that kind of chance?
Keeping your WordPress site up-to-date is one of the easiest things you can do. For the past couple of versions, the ability to install updates has been included by WordPress. Not only that, but websites are notified whenever a new update becomes available.
Black and whitelists phrases based on which field they appear inside. (unknown/numeric parameters vs. known article bodies, comment bodies, etc.).
I prefer using a WordPress plugin he said to get the work done. Just make sure the plugin you select is in a position to do select copies, has restore functionality, and can replicate. Also be sure it is often updated to keep pace. There's absolutely no use in not working, and backing up your data to a plugin that is out of date.