It works! And allows command injection.. argh