Files can easily get lost if you don't have good protection on your website. Some of those files may be stored in your computer and easily replaceable, but what about the rest of them? If you lose them the first time where will you get them out of again? For sites which have been in operation for quite a very long time, secure your wordpress website is vital. Often sites have created a high number of files and have a lot of data. Recreating all that are a nightmare, and not something any business owner wants to do.
Also, don't make the mistake of believing that your web host will have your back as far as WordPress backups go. Not always. It has been my experience that the company may or may not be doing proper here are the findings backups while they say they do. Take that kind of chance?
Move your wp-config.php file up one directory from pop over to this web-site the WordPress root. WordPress will search for it there if it cannot be found in the root directory. Also, nobody else will have the ability to read the document unless they've SSH or FTP access.
What if you go to WP-Content/plugins, can you view that folder? If so, upload that blank Index.html file inside that folder as well so people can not see what plugins you have. Someone can use this to get access because if your version of WordPress is current, if you're using a plugin or an old plugin with a security hole.
However, I advise that you install the Login LockDown plugin as opposed to any.htaccess controls. That will stops login requests from being allowed from a specific IP-ADDRESS for an hour or so after three failed login attempts. You can access your mobile while from your workplace, and yet you still have protection against hackers, if you accomplish that.