o yea... nice pic of Kerry in your sig Homer 8)
I normally make one file with my layout done in html and then just have a get var that tells what page to load .... to make sure they don't load any file they want (like some remote script or something) I have an array that keeps track of the valid values for the get var and the values that go with them ... so like if I had a home page called homePage.inc
my url for that would be something like
www.somesite.com/?page=home
and then the array entry would be something like
pages['home'] = "homePage.inc";
and then in where the body of my page goes I do something like
include (pages[$HTTP_GET_VARS['page']]);
of course there is an if statement to see if the page var is set and if the file it's going to try to include exists