The reason for this stems from my near paranoid nature about making external system calls - Introducing an external system call places an additional dependency upon the code to run and introduces a point in the system where the code may either fail or be compromised. If you must perform system calls, ensure that the full path to the application is given and that system return codes are checked - Also see my discussion on this here