test_escapeshellcmd

<?php

// 我们故意允许任意数量的参数
$command = './configure '.$_POST['configure_options'];

$escaped_command = escapeshellcmd($command);

 
system($escaped_command);

?>