Yup. I agree Evulness. I have my own framework integrated with Smarty...

Everyone of my forms (the display or controller; not the html code but the part that tells which html templates to display) consists of about 10 lines of code. This completely handles whether people can access the page (permissions), session handling, and database management.

gotta love oop!