Hardening wordpress

wp-config.php

 
define('DISALLOW_FILE_MODS', true);