fix wordpress malware cleanup Watch out form submissions. You may useRegexp to process the data . You can even define preloaded variables as type data in the kind of checkboxes, radiobuttons etc..
Don't make the mistake of believing that your hosting company will have your back as far as WordPress backups go. Not always. While they say that they do, it has been my experience that the hosting company may or may not be doing proper backups. Why take that kind of chance?
Exclude pages see this - This plugin provides a checkbox,"include this page in menus", which can be checked by default. If you uncheck it, the page won't appear in any listings of webpages (which contains, great post to read and is usually restricted to, your webpage navigation menus).
You can extend the plugin features with premium plugins such as: Amazon S3 plugin, Members only plugin, DropShop etc.. So I think you can use it at no cost and this plugin is a good option.
Do your homework and some hunting, but if you are pressed for time and need to get this done once and for all, try out the WordPress security plugin that I use. It is a relief to know that my site (and company!) are secure.