Have a go at PHP for simple email forms first (although, stick codes in to prevent spam), generally there is already code out there to use, so don't reinvent the wheel.
A lot of php attacks are SQL injection, but if you never have a sql backend then this isn't an issue. I would start with...