Website input command injection How running php_exec on raw unsanitized inputs is a good way to get shells on your box read more comments