Nice work,
I suggest you put the SQL connection details in the PHP script though. That way you can safely use the script clientside without worrying about people getting your DB info.
If you're only using it serverside you should check the IP and user agent of the connecting machine to increase security theres an example here:
http://forums.graalonline.com/forums...&highlight=php