Don't forget binding posted form data to a model, and then validating it. It seems like 60% of my web development time is spent getting that right.