site cleanup

Fixing a hacked WordPress site starts with cutting off the attacker—but what you do next determines whether they come back. Here’s the proven cleanup checklist.