diff --git a/ajax/executecommand.php b/ajax/executecommand.php
index 7a15663..f329bd5 100644
--- a/ajax/executecommand.php
+++ b/ajax/executecommand.php
@@ -1,6 +1,8 @@
 <?php
     session_start();
     $command = &$_GET['var1'];
+    $command = stripslashes($command);
+    
     $image = $_SESSION["currentimage"];
     
     $ext = end(explode('.', $image));
diff --git a/upload.php b/upload.php
index ba9a8dc..d994479 100644
--- a/upload.php
+++ b/upload.php
@@ -3,7 +3,8 @@
     $image = $_SESSION["myemail"];
     
     $target = "bank/".$image."/original/";
-    
+    $target = escapeshellarg($target);
+
     echo $target;
     
     $target = $target . basename( $_FILES['uploaded']['name']) ; 
@@ -16,4 +17,4 @@
         echo "Sorry, there was a problem uploading your file.";
     }
     echo "<meta http-equiv='refresh' content='2;url=registeredarea.php'>";
-    ?>
\ No newline at end of file
+    ?>