Hi Oded!

Your code here suffers from potential shell-variable injection. See my posts about:

Code Injection

Shell Variable Injection

And why can’t we have comment previews here? Stupid and incredibly lame WordPress.