What are the potential pitfalls of including PHP files without using quotation marks?

Including PHP files without using quotation marks can lead to potential security vulnerabilities, as it allows for remote code execution if an attacker can manipulate the file path. To prevent this, always use quotation marks when including PHP files to ensure that only files within the specified path are included.

include 'path/to/file.php';