Most Secure question

I am pretty new to this so be understanding...

OBJECTIVES

1. A website that will allow users to INSERT, UPDATE and DELETE sensitive information to a SQL database . 

2. Provide tight security

3. Allow multiple / many users access to their accounts from the internet 

CONCLUSIONS....based on readings and tutorials 

1. Set up Forms Authentication with passwords

2. Set up SSL

3.Preferably use data access layers

QUESTIONS

1. If SSL is implemented, is it more secure for the users to communicate through the data access layers instead of directly with the SQL database?

2. When a user requests info from the server and the data is routed to the user using SSL, does encrytion of connection strings still need to be used or is this not necessary using SSL.  Same question for encryption of values being passed to and from and being updated.

many thanks
...