Allowing users to insert data in operating system commands generally creates
more problems than it solves.

Anything that can be done via operating system commands can usually be done via a
language's native SDK. +
Therefore, our suggestion is to avoid using OS commands in the first place.