use of Window Shell in programme

Can someone t开发者_JAVA技巧ell me that if there is any harm (to OS(Win Xp) if i programme using window shell in ASP.NET.

If you pass parametres to this windows shell that get from your page and page parametres that a user can set, then maybe a lucky attacker can make a big mess, deleting files (maybe ?)

This is the Process class that run the apps.

http://msdn.microsoft.com/en-us/library/system.diagnostics.process.aspx

If you use it for your backoffice and trusted users or you do not pass any parametres then is better. I use it that way for my trusted user to run an old application for my client that need to process some data and there was no other way for the time...