如何使用php加密登录表单中的密码

我创建了一个表单来在sql server中插入数据（用户名和密码）。那里的密码已经加密。我现在的问题是，我是否要在参数化查询中插入$encrypt_pass。

<?php 
$pass= $_POST['pass'];
$encrypt_pass=md5($pass);
$params = array($_POST['user'], $encrypt_pass);
$server = "MELODY-PC'SQLEXPRESS"; 
$options = array("Database"=>"customerdb", "UID"=>"dbadmin", "PWD"=>"melodyjerah"); 
$conn = sqlsrv_connect($server, $options); 
$sql = "SELECT * FROM accounting_login WHERE username = ? and password = ?"; 
$stmt = sqlsrv_query($conn, $sql, $params); 
if(sqlsrv_has_rows($stmt)) 
{ 
    header("Location: page_accounting.php");    
} 
else 
{ 
    echo "Invalid USERNAME or PASSWORD!"; 
} 
?>