WordPress Security: Complete Site Protection Checklist

find /var/www/wordpress -type d -exec chmod 755 {} \;
find /var/www/wordpress -type f -exec chmod 644 {} \;
chmod 400 wp-config.php
location = /xmlrpc.php { deny all; }