I ran accross your post,
can you tell me how to harden the config file against this

would this do it ?

<Directory "<Directory "E:\infra\ ...">
AllowOverride None
Options None
Order deny,allow
Deny from all
Allow from localhost
</Directory>