Security, Security, Security

I run a half dozen, generic Coldfusion/MS Access dynamic websites for clients that contract with me. I used CFmx advanced, shared plan servers at CT. I have recently become more concerned with the level of security that I am protecting thier data with.

Can anyone summarize, or share with me, the various methods that use to safegaurd website information. These might include safegaurding the database directory (which is below root), protecting the databse files, the datasource, etc.

I sure would appreciate assembling the best ideas from everyone, and this post might serve to educate a lot of other people on shared servers also in the future.

Stephen
Tallahassee, FL