amznVibe - 1:50 pm on Oct 25, 2008 (gmt 0)

Oh and as far as best practices:

Make sure your server is running a firewall like CSF or APF
(if on a shared host and they are not, change hosts)

Make sure your server has the most current version of apache+PHP
(if on a shared host and they are not, change hosts)

Make sure your PHP has security restrictions like open_basedir
(if on a shared host and they don't use it, change hosts)

Make sure you don't have public directories that are chmod 777 on a shared host

Recommended: remove version number announcements from apache, php and wordpress

Recommended: remove xmlrpc.php from wordpress

Consider getting your own VPS so you can setup security properly.