use full path for the command.
you just do not want to assume PATH is set right for the php user.
the please use correctly phpbasedir to limit the ibay php user to the ibay + the command you need and nothing else.
shell_exec is powerfull way to escalate privilege