Do not use shell for command execution, it allows users to trivially inj...

...ect any command

into the shell by using shell escape characters.