Why would they ever allow embed of PHP or Java? That's the biggest invitation to hacking I've ever heard of.