How can I make my website more secure and protected?

What should I do to make my website more secure from potential hacks or attacks like SQL injection?