File Inclusion Prevention Best way is to avoid passing any user-controlled inputs into any file inclusion functions or APIs.