yeah, that's how I normally do it. But the PHPLib has got pre-written authentication and session management classes that are quite secure. I am actually in the process of modifying a project that is using those classes and I would like to continue using them.
The problem is the way they are set up that if I simply take the form and bash it somewhere into my design, it won't work. Doesn't authenticate. If it is sitting on its own page and being called from within the authentication class, it works.
If anybody has had any experience with PHPLib, I would really appreciate your help.