I really don't understand what your question is, but your call to exec () should look like this:
exec ($script.' '.$file.' '.$prefix);
If you accept parameters from outside (for example, from the GET or POST parameter), be sure to use the escapeshellarg() arguments for security reasons.
source share