Use "mkdirp" instead of exec("mkdir -p")

Prevents command injection.