use escapeshellcmd instead of escapeshellarg