I guess it would be nearly impossible to allow users to use dynamic codes such as PHP? Or would there we a way I could allow it, but block and hazards? like trying to access files out of their sub domain. Would javascript be a concern?