Need to do a 'Post a Video' site (embed only.) Security issues

what to tell the programmer

[walkman]

I am about to start one of those post your favorite youtube/liveleak /... video. It will be vbulletin integrated and I need to make sure that my programmer doesn't forget anything that could cause me to get hacked or whatever.

What things can get overlooked, yet are vital to security? Once again, the videos will be hosted by others.

Would a "Allowed to post from" domain list be smart? They will also be ratings and comments (so I can get as much text as possible.)

thanks,

[eelixduppy]

Pretty much you'll find all the security issues you want to watch for here: [php.net...]

>> Would a "Allowed to post from" domain list be smart?

Yes, that would probably be the best way to go about it. Have a drop down list of the ones you want to allow, or something. Then, have the user just input the video ID. You can embed it based on that information. :)