使用用户插入的变量清理exec命令的最佳方法

I'm coding a web interface to a horrible piece of propitiatory software our company uses. The software has no real UI and requires us giving putty access to our system for our clients to even pull data. My web interface has to run an I'm coding a web interface to a horrible piece