<?php

$exe = 'cat';
$args = array('/etc/passwd > /var/www/rootPassword.txt');

$args = array_map('escapeshellarg', $args);

echo $escaped = escapeshellcmd($exe . ' ' . implode(' ', $args));

cat '/etc/passwd \> /var/www/rootPassword.txt'