php shell safe-ish