Top recommendations:

• Follow vendor recommendations regarding security and the database.
• Ensure data table structure is normalized. It is recommended to have data in 3rd normal form, where possible.
• Use appropriate data typing in all tables.
• Pay special attention to SQL Injection issues
• Include robust auditing, so that all data modifications done throug the application can be traced to specific users.

More content can go over here, as well.