Java is client-side so that is a big no-no. PHP and ASP.NET are very similar in what they do so it's just a matter of whether you use Windows or Unix hosting really as to which one you use. That and the applications you may use already.
Are you sure about jave and client side? I think you have mistaken it because I think it is the most secure and reliable server side language. We have JSP, JSF and countless technologies to meet our needs. You will have to re-consider your statement buddy.
In my opinion Asp.net is the best option for building secure websites. I am using this to build websites and also i recommend everybody to use Asp.net
