Arbitrary shell execution

Uses of shellexec and exec were not escaping filenames and configuration settings in most cases...