I've made a login form, which send login & pass to our server, which is keeping data encoded in a database. (It encodes the password upon reception) I'm pretty confident about the encryption & security of the database, but I'm not about the fact of sending login & pass.

Can such vital data be viewed using a sniffer or something else ? If so, what should I do to avoid this ?