I ran accross your post, can you tell me how to harden the config file against this would this do it ? <Directory "<Directory "E:\infra\ ..."> AllowOverride None Options None Order deny,allow Deny from all Allow from localhost </Directory>