Added allow_url_include. Added suggestion for preg_quote.

It seems a placeholder was left for the correct option to be replaced later, and never was addressed. So, nudge, I guess.

I have also added a simple note about escaping user input for regular expressions.