title: Securing a PHP with password as a parameter
body: <p>We run a database on Windows 10 and want to be able to update customer order status on an SQL database on our website but the host does not allow computers to connect to the database.  It can only be queried through the website.</p>
  <p>Is calling a PHP script with a strong password as a paramater safe, eg using the flow below?</p>
  <p>Database calls the pages <a href="https://example.com/interface.php?pw=mypw&amp;customer=mycustomer&amp;status=1" rel="nofollow noreferrer">https://example.com/interface.php?pw=mypw&amp;customer=mycustomer&amp;status=1</a></p>
  <p>The the PHP script will validate the PW, check the customer exists and validate the status passed is 0,1,2,3,4,5 and update the SQL accordingly?</p>