Okay, got everything humming. So now I want to lock down my wp setup before I go live. What should I do?
I read and followed http://codex.wordpress.org/Hardening_WordPress but it's a draft and may not concern newer security problems.
Also, what number permission should all files and folders be? I see people mention 666, 644, 777, etc.