Secure web area

I am trying to create a secure area for a friend of mine. She works for a healthcare company and they need to send volitile patient data back and forth through a form.

I am trying to create a secure area on thier web server “https” to make it totally secure and just not pass protected.

I know they can host sql scripts but I dont have a clue where to begin.

Any help/suggenstions?