Slightly off topic, but worth mentioning. Be very careful if you are executing a shell command that contains any user supplied input. An attacker could conceivably append a ; and an arbitrary command on the parameter input and have it execute on your web server. Some validation of the input before it is executed would be a good thing