[gesman]

The absolutely best way to avoid any problem with stolen bitcoins is to use Master Public Key (MPK) to generate bitcoin addresses for customers to send money to. Electrum wallet (electrum.org) supports MPK. MPK allows generation of bitcoin addresses programmatically in a "receive only" way, without private keys. This way - even if hackers totally break into your server and online store database and steal everything - not a single bitcoin can possibly be stolen.

Real life implementation of this concept: http://wordpress.org/plugins/bitcoin-payments-for-woocommerc...