Security is a Process, not a Product. It's an ongoing process for any product or service. As we know Internet is full of spammers and hackers threatening to deface or take down your site or steal confidential data. Everyone should keep security concern in mind when administering site/blog. No doubt Drupal community has developed a solid process to help you avoid major headaches when dealing with security matters.

Sharing Few major thing to make it more secure .

Use Strong Passwords

Its another easiest thing can be added to drupal base site without giving extra effort . Comment field can be added to any type of content type of Drupal . Here we are sharing all steps to add Comment field . here it goes .

i) Navigate to the Content types administration page (Administer > Structure > Content types or http://example.com/admin/structure/types).
2) Find the content type for which you'd like to add fields on the comment form, and click "Manage fields" next to it.
3) Click the "Comment fields" tab.

Because of the way Drupal is structured, it is very fexible in adapting to the needs of a wide range of different web sites. Permission to perform various actions such as creating content, writing a comment, writing a blog post and so on can all be assigned to different roles within Drupal, be it the role of an administrative user or the role of a standard user who is logged in. This means we can grant the permissions to contribute and help in managing the content of the web site to the users of the web site.