To avoid hacker attacks you should close SQL injection holes and add all available hotfixes, pacthes etc.

That should block tools like Havij, Acunetix og Nikto to get into your webapp…