You should never store sensitive credentials in your code. Storing configuration in the environment is one of the tenets of a twelve-factor app. Anything that is likely to change between deployment environments, such as database credentials or credentials for 3rd party services, should be extracted from the code into environment variables. Basically, a .env file is an easy way to load custom configuration variables that your application needs without having to modify .htaccess files or...
You can admin a SQL Server with php, like PHPMyAdmin for MySQL
Github repository: https://github.com/miguelaxcar/PHP-MSSQL-Server-Admin
Web based tool written in PHP by Luiz Miguel Axcar to build and run queries on a remote or local MSSQL (Microsoft SQL Server). Support for SQL code highlight (!), table browser, field browser, TOP records, most used tables, CSV results export, etc. Most tested in SQL 2000 version.
If you find some issue ther let me know and I help you fixing it.