escapeshellarg() is not required here