but if you’re using static plugin, it will make any dynamic code / widget useless (like recent comments, recent posts, top commentators, on this site for example)

as i said earlier, first thing is to backup. Most of the hackers follow like this: they look for all available sites and scripts on any server, and then hack into any of them, so that they get access to file system, once they are there, they can destroy all the sites on that server, so on site security don’t matter much (as first step) so make a backup regularly.

secondly, no matter what plugin you use, you can be hacked, . . . period! there is almost no code / script that can’t be exploited.

Making your site static may or may not serve you for security issues, but it will surely help boast your page views as site will load hell fast!

thanks again. I’ll dare to bug you again… but how can I know which files are not needed to be writable?
I found a plugin that turns your blog into static .html pages http://www.sorben.org/really-static/index.html – would this do?

Thanks!

if you want to know 2 ways (sorry minimum is 2) then its:
1. backup your website files and database, both
2. make your files read only (the ones that are not needed to be writable)