Hi,
– Disable all the plugins from FTP account.
– Remove all the unwanted code from htaccess
– change the password for your blog and control panel to the strongest one
– always remain updated to the blog as wordpress source code is an open source.
– do not install any vulnerable plugin into the blog
– If your site has hacked then restore it from the backup or consult hosting service provider to restore it from the backup
Thanks,
Shane G.