How can PHP variables be properly passed as parameters in an exec() function?

When passing PHP variables as parameters in an exec() function, it is important to properly escape the variables to prevent any potential security vulnerabilities. One way to do this is by using escapeshellarg() function to escape the variables before passing them to the exec() function. 

$param1 = 'value1';
$param2 = 'value2';

$escaped_param1 = escapeshellarg($param1);
$escaped_param2 = escapeshellarg($param2);

exec("your_command $escaped_param1 $escaped_param2");

Keywords

PHP variables exec() parameters passing

Related Questions