Syntax of escapeshellarg in PHP
string escapeshellarg(string argument)
Properly escapes argument so it can be used as a safe argument to a shell function. When directly passing user input (such as from forms) to a shell command, you should use this function to escape the data to ensure that the argument isn’t a security risk.