Reading Facebook PHP home page source. No objects, cool. Also agree with @RogueAmoeba that there’s no security concern here.