Getting a good exchange script that is secure and patched against exploits is gonna be expensive. I would be wary.