I've read articles on what to do if wordpress gets hacked, its so much easier if you had a single site. But I am interested to know the best approach if you had a very high number of users on a multisite.
note - I will be keeping regular backups.
I would check wp-config and htaccess and replace all other wordpress files and change passwords, secret keys.
What would be the quickest way to upload wp-content/uploads directory backup, or what if in this directory had the same malicious code in backups?
And if I did all this, would I be able to keep the database, even if the database had malicious code, is it possible to scan it or something because what if backed up databases also have the same malicious code.
Thanks in advance