The fix hacked wordpress site Codex has an outline of what permissions are acceptable. Directory and file permissions can be changed via an FTP client or within the administrative page from your web host.
Protect your login credentials - Don't keep your login credentials her latest blog where they might be found by a hacker. Store them off, as well as offline. Roboform is good for protecting them, also. Food for thought!
In case you ever want to migrate your site elsewhere, like a new web host, you'd have the ability to pull this off without a hitch, and also without having to disturb your old site until the new one was set up and ready to roll.
If you aren't currently running the latest version of WordPress, upgrade now. Leaving your site in an old version is similar to keeping your door unlocked when you leave for vacation.
There are always going to be risks being online (or even just being alive!) And it's easy to get caught up in the panic. We often put the breaks on, when we get caught up in the panic. This isn't a response. Just take some common sense precautions forge ahead. It is going to have to be dealt with then, if more helpful hints something does happen and of quaking in your boots 23, no amount will have helped. If nothing does, all is good and you have not made yourself sick.