Hello my friend,
I believe that you have enabled the administrator secret URL parameter in Admin Tools and that's why it's kicking you out.
The easiest way to work around this issue is using an FTP application or your hosting control panel's File Manager to rename a file.
Go inside the plugins/system/admintools directory on your site. You will see a file named main.php. Rename it to main-disable.php. This will turn disable the Web Application Firewall from executing and you can access your site's back-end again. After you have fixed the cause of your issue remember to rename main-disable.php back to main.php, otherwise your site will remain unprotected!
Now that you have access back to your site's control panel, let's fix the problem.
Go to Extensions, Admin Tools, Web Application Firewall, Configure WAF. Note down the contents of the "Administrator secret URL parameter". Please note that it should consist only of letters a-z (without accents or diacritical marks) and numbers 0-9. For the sake of this example, let's say it reads test.Also set "Administrator secret URL parameter" to No.
Log out of your site's back-end. Using FTP, rename the main-disable.php file back to main.php. Now, in order to access your site's administrator log in page you need a URL like http://www.example.com/administrator/index.php?test where www.example.com is the domain name of your site and test is your Administrator secret URL parameter.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!