I know basic PHP (enough to do database driven sites, barely), but have only worked inside existing CMS's for years.. Drupal, Wordpress, etc.. Now i'm getting LOTS of requests from a certain niche market to make their sites, but Drupal etc is overkill.. so I want to make my own little system.. All I need to do is have good SECURE authentication, that lets authorised users submit data to a pretty large financial-style database. I'll also be piping emails through to scripts to submit more data that has to be approved by admins, etc. I'm fine with the logic behind it.. and could probably write it all in bare PHP/MySQL, but then i'm not good enough to make sure it's totally secured, all data is perfectly validated, etc.. and I really can't be fucked coding it all from scratch.. and surely these days you don't need to? What's the best way to go about it? I hear about all these PHP frameworks etc.. is that what I need? Halp.