change.php: fix wrong function name

changed shell_escape_arg to escapeshellarg