If the Web and database servers must be on different machines, either encrypt all traffic between them or connect the two machines via their own private, physically isolated network.