Does not sanitize/escape paths

File paths are not escaped so when there are spaces the program just passes them on. This is even more dangerous because arbitrary code execution is possible via shell syntax.

Solution: shell-escape the given path for security.