Quotin

A two-person letterpress wedding-stationery studio offers a 'free monogram proof' upload feature. The PHP behind the form pipes the uploaded file into a shell command for processing, and the file's name flows into that command unquoted.