Single ticks are insufficient, passing to the shell at all is trouble. merlyn has a post (feeding text to a process, and capturing its output, safely) which shows a safe way to `echo $INPUT | Some Command` (if the OP insists on pursuing this approach).