note 94589 deleted from language.operators.execution by betz

Note Submitter: Billy Hudson ---- In response to the posters below suggesting to put a $_GET value directly through backticks: DO NOT DO THIS! I REPEAT: DO NOT, UNDER ANY CIRCUMSTANCES PUT UNSANITIZED USER INPUT THROUGH BACKTICKS! Doing this will allow anyone to execute whatever command they want on your system. Please follow the advice that is provided in the documentation page for exec(). "When allowing user-supplied data to be passed to this function, use escapeshellarg() or escapeshellcmd() to ensure that users cannot trick the system into executing arbitrary commands."