@ellemen - I'm not trying to say anything like that so i apologise if that is how it came across. SQL injection can be done in other ways and not just via a website or php script. At the moment many large websites are under constant attack and not all of the attacks are aimed at the website or the webserver, some are aimed at MSSQL itself and use a variety of techniques to inject data into the database to try and get nasty things to appear on pages to infect people with things. 1433 is a known vunerable port and hackers are using some clever tricks to search the web for addresses with port 1443 open, some of these are even automated scripts which detect and attack automatically.
Have a google on the subject as you will find an awful lot of people fighting the problem at the moment. I work for a software company that deals with a lot of other large organisations and i am currently hearing about a lot of damage being done to a lot of our customers sites and MSSQL services, our own website has been under constant attack for nearly 3 months now (the website is one of the things i am involved with) and has been completely destroyed several times.
This is why i tell you to be careful, bugs in the way external access to the MSSQL services is handled is one of the main causes and MS have not fixed it yet.
Port 80 is not needed by the server at all as that is the HTTP port and only webservers use it. PSS is not used by us so you don't need to open a port for that, in fact the port 80 it shows in the PSS config is the port of the remote PSS site it tries connecting to and not an incoming port.