How to make my website more secure?

Question

I created a website using ASP.NET, C# and SQL. 
I have a shopping cart as well which will pass information to World Pay.
I would like to make my website more secure.
I have heard of SQL Injection, code injection and so on.
How can I make my website secure for all the threats?