[dev] turn off allow_url_include in core.php

[Chuck Hagenbuch]

Hi folks-

Does anyone see a reason not to add:

ini_set('allow_url_include', 0);

to the other ini settings in lib/core.php, as another security check?

-chuck