To escape shell commands use the %escapeshellcmd()% and %escapeshellarg()% functions.