import os import subprocess def run_command(user_input): # BAD: Command injection os.system("echo " + user_input) subprocess.call(user_input, shell=True)