We normally use the below when connecting to a SQL Server on our internal network.
$conn = mssql_connect($host, $uid, $pwd);
Is there a way to make sure the password is encrypted when being sent to a remote SQL Server outside our network? I'm assuming the above is not secure?