Let me shoot a scare tactics your way since scare tactics appear to be what compels some people to take how to fix hacked wordpress site a bit more seriously, or at least start thinking about the problem.
Hackers do not have the capability once you got these lined up for your security, to important source come to your WordPress blog. You can have a secure WordPress account that provides you big bucks from affiliate marketing.
It's a WordPress plugin. They are drop dead simple to install, have all the features you need for a job such as this, and are relatively cheap, especially when compared to having to employ someone to have this done for you.
You may extend the plugin features with premium plugins such as: Amazon S3 plugin, Members only plugin, DropShop etc.. I think you can use helpful resources it for free and this plugin is a good option.
Using a plugin for WordPress security makes great sense. WordPress backups need to be performed on a regular basis. Do not become a victim as a result of not being proactive about your site!