Untitled

shell_exec('ls '.escapeshellarg($_GET['param']));