I've recently been asked to help out a friend with some server and website issues they have been having, nothing major really.
However I found out that since the day they got their VPS everything, including uploading files, installing wordpress, all FTP, everything has been done through root.
So I am wondering what is the best way to fix everything to make it more secure?
The reason im asking is because im assuming its more than just make a new non-root user to use for day to day stuff? Due to how everything has been set up and ownerships already with every other file etc