Uses escapeshellcmd() and do not allow LOAD_FILE inside queries