we just hired a new web programmer. she wants to program our extranet in php. i know nothing about php programming and im not sure she knows anything about programming security. this will be running on an iis server.

how dangerous is this?

is there any test questions i can ask her to find out what she knows?

should i stop her from using php?