Best way to avoid code injection in PHP

Question

My website was recently attacked by, what seemed to me as, an innocent code:

Answer 1

I'm assuming you deal with files in the same directory:

This is not too pretty, but should fix your issue.