you must quote arguments. The data comes from the outside, you mustn't trust it. Also remember that the file can have spaces in it - those must be quoted as well