There are countless blogs. Some people are making money and some do not. Most of the bloggers use WordPress at the moment. You need to make sure that your blog is protected.
Cloning your site is just another degree in fix wordpress malware plugin that may be useful. Cloning simply means that you've backed up your site to a totally different location, (offline, as in a folder, in order to not have SEO problems) where you can get it in a moment's notice if the need arises.
I protect an access to important files on the blog's server by placing an index.html file in the particular directory, which hides the files out of public view.
Exclude pages - This plugin provides a checkbox,"include this page in menus", which is checked by default. If you uncheck it, the page won't appear in any listings of webpages (which includes, and is usually restricted to, your page navigation menus).
Along with adding a secret key to your wp-config.php document, also think about altering your user password into something that's strong and unique. A great idea is to avoid common phrases, use upper and lowercase additional info letters, and include numbers, although you will be told the strength of your password by wordPress. It's also a good idea to change your password frequently - say once every six months.
Utilizing a plugin for WordPress security only makes sense. Backups need to be performed on a regular basis. Do not become a victim of not being proactive about your 16, because!