use file_get_contents instead of include

- fix potential file inclusion security risk
- file_get_contents is much better suited for reading a file into a
string, anyway
- method is not used anywhere in vanilla, yet