Escaping strings to be used in shell commands?

[Gabriel Ambuehl]

-----BEGIN PGP SIGNED MESSAGE-----

Hello,
I wonder what is the easiest way to escape user submitted strings so I
can
safely use them in os.system() calls. Limiting the allowed chars isn't
feasible since I want them to use as safe passwords as possible and
those generally DO consist of special chars. Any good ideas how I
could solve this?


Best regards,
 Gabriel

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.0.2i

iQEVAwUBOtWj4sZa2WpymlDxAQFZpAf/VO3L1XYZbdMl8IqF+lgsEm20yRb7q9J3
o5Hat5HRDhnEEEUGzZh5jnc/ax5tsONQHqEiCivpQc9m7PR1P0DKdHpPBCtDedA/
IxtJgGJx/Thzw3LJ0itkR6L9Edr9IA2LywS4HGGPQoSyKJBDIW0RQ5Eb15ejFQM4
7eValGb20/uj470bWtYejCOAkMQ1wMfao6vn5N5nVhvsq4XwgcUm44kamfjklmcM
avWPQELxke+ma4vTAZGwphTAhc6jXAUalB4yUpGBMt87WUu6xUFCxmcFdCIHaq0r
Dy6o4h5+qf/2cnGBak17FDxwhoiu+uhpelpQpNmOoNgdRqcMApjpMA==
=UAn+
-----END PGP SIGNATURE-----