The backtick execution operator runs a shell command containing a variable.
Do not use backtick execution with variables; validate input and use escapeshellarg.