I would go for java, as it is much faster (orders of magnitude) than php, and there a lot of documentation on how to build secure applications in java both on the net and in the bookstores. Another advantage of java is that if you go the java road that you may apply role based security on a method level (using EJB technology). Java also have a much better track record with respect to exploits compared to PHP, even though some of the PHP problems are more related to poor programing practices of the PHP users than to problems with PHP itself. The problem with java is that you usually have to pay more money to your service provider to run a JSPs , Servlets and EJBs than you have to pay to run php. Regards Uno Engborg
Thanks for this explanation hicham
