Backup backup backup... keep your CMS up-to-date with the latest security patches (if yr CMS isn't ever updated choose another one) .. and don't use stupid passwords.