Making a website secure is such a broad question it can't really be answered comprehensively in a question like that. A better starting point is "how do I protect my application from threat x"
wtf did I just read?
Unplug the server, bury it in the back yard. Make sure the hole is deep. Website is now secure (maybe).