when ARCH_PHP is used the payload is encapsulated in ' so I think most chars are OK (except ' which would close it early. 

Currently the injection is based on ; although I guess it probably doesn't matter if the cmd is actually using ; as part of itself - need to think about it more :)