Website security tips

1. Use HTTPS/TLS to encrypt data
2. Keep your website up to date
3. Separate database from the file server
4. Use a reputable hosting provider
5. Watch out for SQL injection
6. Protect against XSS attacks
7. Both client and server side validations