string interplation for os.system is still susceptible to single quotes. switching to subprocess.call for better protection