PHP's exec() a security hazard?

Is enabling exec() in php a security hazard? A user on the system wants it enabled for use with Gallery. What are some steps to secure this command?

 

 

 

 

Top