Basically you were stupid to let them use your personal space.
Tell them to get their hand in their pocket and get some asp.net hosting for themselves.
From what people have said it might be a cross-domain issue. Tell them that, it won't work cross domains.
Maybe xyz.co.uk on php hosting and sub.xyz.co.uk on asp.net hosting. Get the DNS sorted and maybe that's a better option.