fix wordpress malware virus will even tell you that there's not any htaccess in the wp-admin/ directory. You can put a.htaccess file if you desire, and you can use it to control access to the directory from IP address or address range. Details of how to do that are easily available on the net.
Also, don't make the mistake of believing that your hosting company will have your back as far as WordPress backups go. Not always. It's been my experience that the hosting company may or may not be doing proper backups, while they say they do. Why take that kind of chance?
So what is? Out of all of the options you can make, which one should you choose and which one is right for you specifically at the moment?
So what's the best he said way to achieve WordPress cloning? Out of all of the possible choices that are available right now, which one is right for you personally and which path should you choose?
Implementing all the above will probably take less than an hour to finish, while making your WordPress website more immune to intrusions. Over 1 million WordPress sites were this past year, mainly due to preventable security gaps. Have yourself prepared and you are likely to be on the safe side.