title: PHP shell input sanitizing
body: <p>I want input of alphanumeric string (sha1 - git commit ID). Is sanitizing with regexp <code>/[^a-z0-9]/</code>, using <code>preg_replace</code> with blank string enough to safely pass it to shell?</p>