Cloning your site is just another degree in fix wordpress malware that may be useful. Cloning simply means that you have backed up your website to a totally different location, (offline, as in a folder, in order not to have SEO issues ) where you can get it in a moment's notice if the need arises.
You can search. You can easily restore your site with the use of your files and change everything that must be changed, if hackers suddenly hack your site.
Move your wp-config.php file up one directory from the WordPress root. WordPress will search for it there if it cannot be found in the main directory. Also, nobody will be able to read the document unless they have SSH or FTP access.
It is really sexy to fan the flames of fear. That is what bloggers and journalists and politicians and public figures do. It's terrific for readership and it brings money into the war chests. Balderdash.
Do your homework and some searching, but if you are pressed for time and want to get this try the WordPress security plugin that I use. It's a relief to why not look here know that my site (and company!) are secure.