Use PHing instead of Submodules (github #1)

WordPress (zip) will be downloaded, extracted
and placed to a configurable folder (via ini).

- PHing.ini: contains URL to WordPress-ZIP
- PHing.xml: WordPress target can fetch WordPress
Hardening WordPress (github #2)

- Block wp-include files
- Remove wp-config-sample.php
Hardening WordPress (github #2)

- Install a Firewall-Plugin
Hardening WordPress (github #2)

- Use config with additional security actions
Hardening WordPress (github #2)

- Disallow automatic updates
Hardening WordPress (github #2)

- Enable a trash for media files
Hardening WordPress (github #2)

- Lesser amount of post revisions
- Make changes direct on the file system