Now that all the applicable passwords have been changed, the next step is to back up your site. You’ll need to back up your files, &, if you have a content management system, you’ll need to back up your database as well.

Backing Up Your Files

When backing up your site’s files, you have a couple options. You can either back up only content that you yourself have put there, such as documents, pictures, & purchased third-party software, or you can back up the entire site. Please do not forget to include the word “hack” somewhere in the filename, as it would not be a great idea to inadvertently restore your site from a hack at a later time. An FTP client is likely the most efficient way to do this. an article called using FileZilla to back up your site shows you how to back up your files.

Your hosting provider may also have facilities for backing up your site in their control panel. Don’t forget to download it from the server once the backup is complete.

Backing Up Your Database

If you have a content management system such as WordPress, Drupal, or Joomla!, your next step is to back up your database. You can do this either from phpMyAdmin or a similar program, from a plugin or module provided by your CMS, or from the command line.

To back up your database using phpMyAdmin, refer to the article:
Backing Up Your Database with phpMyadmin
or, if you have shell access, refer to
Backing Up Your Database from the Command Line

Again, don’t forget to put the word “hack” somewhere in the filename, though the truth is that it very well may not be, depending on the method of site compromise.