Security

Whats the best way to secure a PHP driven (Image Board) script that doesn't require login/password to use?
The admin section (using combo of cookies/session controls for login, and hashes)?

Any pointers would be grateful.