Allow me to shoot a scare tactics your way since scare tactics appear to be what drives some people to take fix wordpress malware a bit more seriously, or at the very least start considering the issue.
Hackers do not have the capability once you got all these original site lined up for your own security to come to your WordPress blog. You definitely can have a WordPress account especially that one which gives you big bucks from affiliate marketing.
For me it's a WordPress plugin. They're drop dead simple to set up, have all the features you need for a job such as this, and are relatively cheap, especially when compared to having to employ someone to have this done for you.
WordPress is one of the platforms for blogs and websites. While WordPress is pretty secure from the box, there are always going to be people who wish to create trouble by finding a way to split into sites or accounts to cause damage or inject hidden spammy links. That's why it's important to make sure that your WordPress installation is as secure as possible.
However, I recommend that you could try this out you set up the Login LockDown plugin as opposed to any.htaccess controls. Login requests will be stopped by that from being permitted from a certain IP-ADDRESS for an hour or so after three unsuccessful login attempts. It is still possible to access your cell see post while from your office, and yet you have good protection against hackers, if you accomplish this.