A set of measures that make a website harder to attack: disabling file editing from the admin area (DISALLOW_FILE_EDIT), turning off the display of errors, forbidding PHP execution in uploaded files, disabling XML-RPC and setting correct file permissions.
FAQ / Glossary