Hello,
Just wanted to share with everyone 2 really good sites that have a lot of comprehensive info on securing your site. Most stuff applies to an Apache server running Joomla and/or Wordpress. The first site is http://perishablepress.com. If you dig a little deeper you'll see they have a whole section dedicated to site security here http://perishablepress.com/press/tag/security. The other site I found is http://www.emergingthreats.net. If you use snort as an IDS on a Linux server you will love this site. They have not only snort rules, and firewall rules but list of bad known ips. These guys know what they are doing and have grant funding from the National Science Foundation and the Army Research Office. Every time I get some one browsing my site suspiciously (like looking at my home page 3,549 times), sure enough I look them up and they are on their list. Be sure to check these 2 sites out. After using their info cracker attacks as well as bad bots visiting my site has been cut down in half.