Shellquote

This function ensures that strings you use as arguments to the system() function (or "cmd"|getline commands) are safely quoted. First, all single quotes are converted to '\'', and finally, the argument is wrapped in single quotes.

function shellquote(str) {
    gsub(/'/, "'\\''", str)
    return sprintf("'%s'", str)
}