web service or something

I'm not sure If I am right but the messenger system I am writing right now it connects right to the mysql database I need to have it I think where it will connect from Client --> webservice ->to database to protect the database information from being stolen or something. Also maybe that will speed up the connection as well Right now its a lag when it connects which I believe is due to it connecting to the db directly. I need to be able to upload a file to my site then that file also be in connection with the db and then clients connect to the file each time they log in. I am not sure if I am right or not but any insight would help out as well. I hope someone understands what I need and can really help out.