I'd be interested in hearing about what stack-specific measures website owners should take (outside of just pass phrases or using bcrypt) to secure their syste

I'd be interested in hearing about what stack-specific measures website owners should take (outside of just pass phrases or using bcrypt) to secure their systems. I run several sites, and I'm not a security expert. It'd be great to have some sort of checklist of things I should and shouldn't do.