Added a check to see if the field exists (likely doesn't on new posts) and a bit more escaping on the front end.

I also returned the meta field, rather then echoing.