If your site can be hacked, it will be hacked!

• Use Drupal's built in security functions when you write custom code
• Subscribe to the security email newsletter or RSS feed
• Apply security upgrades as soon as they become available - both to Drupal core and contrib modules