What are the potential security risks associated with setting allow_url_include to on in PHP?

Setting allow_url_include to on in PHP can lead to security risks such as remote code execution and exposing sensitive information. To mitigate these risks, it is recommended to disable allow_url_include and instead use local file paths to include files in PHP scripts.

// Disable allow_url_include in php.ini
allow_url_include = Off;