https://blogs.msdn.microsoft.com/twistylittlepassagesallalike/2011/04/23/everyone-quotes-command-line-arguments-the-wrong-way/

Conclusion

In general, we can safely pass arbitrary command line arguments to programs, provided we take a few basic precautions.

Do:

1. Always escape all arguments so that they will be decoded properly by CommandLineToArgvW, perhaps using my ArgvQuote function above.
2. After step 1, then if and only if the command line produced will be interpreted by cmd, prefix each shell metacharacter (or each character) with a ^ character.

Do not:

1. Simply add quotes around command line argument arguments without any further processing.
2. Allow cmd to ever see an unescaped " character.

Notes

¹ Worse.
² You did follow my links above, yes?
³ I know you didn‘t.
⁴ Just to be clear: CommandLineFromArgvW neither knows nor cares about cmd‘s metacharacters and looks only for " and \. 

bat文件中调用传参的问题

原文：https://www.cnblogs.com/chucklu/p/9663587.html