Security issue

[eL_NiNo]

I've made a login form, which send login & pass to our server, which is keeping data encoded in a database. (It encodes the password upon reception) I'm pretty confident about the encryption & security of the database, but I'm not about the fact of sending login & pass.

Can such vital data be viewed using a sniffer or something else ? If so, what should I do to avoid this ?

[JoshT]

Can such vital data be viewed using a sniffer or something else ?

Yes, quite easily. You need to look into SSL / HTTPS, which will encrypt the data as it sent over the internet.

I'm pretty confident about the encryption & security of the database, but I'm not about the fact of sending login & pass.

A lot of places don't secure there databases well - they just focus on the internet transmissions, so you're definately on the right track.

[eL_NiNo]

Ok, then, where can I find information to use SSL or/and HTTPS since I know both are use widely ?
It would probably the best way...