It's also important to change your password and admin username if someone will help you and needs admin username and your password to login to perform the work. After all of the work is finished, admin username and your password changes. Even if the man is trustworthy, someone in their company may not be. Better to be safe than sorry!
Cloning your site is just another degree in fix wordpress malware fix which can be useful. Cloning simply means that you've backed up your site to a totally different location, (offline, as in a folder, in order not to have SEO problems) where you can access it in a moment's notice if necessary.
A simple way is to use a few built-in tools. To begin with, don't allow people to list the files Our site in your folders, run a web host security scan and automatically backup your whole web hosting account.
So what is the ideal solution you should choose? Out of all the choices you can make, which one should you choose and which one is right for you specifically right?
Can you see that folder Imagine if you go to WP-Content/plugins? If so, upload that blank Index.html file into that folder as well so people can not view what plugins you might have. Because if your version of WordPress is up to date, if you're using an old plugin or a plugin using a security find more hole, then someone can use that to get access.
Of course it's possible to install more plugins to make your shop more user friendly like backup more helpful hints plugin or share buttons. That's all. Your store is up and running!