Site Hacked

I just recently had my blog hacked, resulting in an entirely different page loading. I searched my files looking for the culprit but had no luck. The only evidence of how it was working was that I had a new error in the log saying that ‘wp()’, as called in the header file, was undefined.

Having now learned my lesson, can I get an idea of favorite methods of bulletproofing? Thanks so much!