Add the YouTube code as normal in the AG form as normal. It will convert certain characters into codes. In the output on your web page, convert the codes back into characters.
My concerns are:
Code: Select all
$pattern = array(); $pattern = '/</'; $pattern = '/>/'; $replacement = array(); $replacement = '<'; $replacement = '>'; $video = preg_replace($pattern, $replacement, $youtube_fieldcontents);
1. What kind of security issues could this cause?
2. Are there ways to address those security issues?