Fixes issue (needs testing though!) for issue reported here: http://forums.zpanelcp.com/showthread.php?27898-Serious-Remote-Execution-Exploit-in-Zpanel-10-0-0-2 - Users have been advised on the forums to disable this module until their server is now running the patched file (as pushed in this commit.)
All occurences of system() have now been escaped, annoucing manual patch on the forums now...
Merge branch 'upstream/master'