Title. When something like the php notice came out Oct 2026- I had next to no idea what the risk was, how to protect my site, etc. I'm scrolling through the sub and seeing people talking about have to use plug-ins to scan their database and files to check for malware being injected- I don't even understand how malware gets injected or how to protect my site from it. I've read about spam issues from contact forms and needing XYZ layered protection- I couldn't understand if these were plugins or something else. I've tried to do some research but it's essentially like trying to read a foreign language which takes understanding three other foreign languages to even begin.

I literally know nothing; I'm just a person who got a domain, a host, hopped onto wordpress and started designing. I haven't gone plug-in crazy, pretty picky about that because I'm already paranoid, but the point still stands that I've done nothing special except for start building. It's aiming to be a research archive.

It concerns me whether it's safe or responsible for me/anyone like me to be making a website.

TIA