Ah! You mean the secret URL parameter for the back-end. OK, now I understand the question and can help you to fix it very easily.
The easiest way to work around this issue is using an FTP application or your hosting control panel's File Manager to rename a file.
Go inside the plugins/system/admintools directory on your site. You will see a file named main.php. Rename it to main-disable.php. This will turn disable the Web Application Firewall from executing and you can access your site's back-end again. After you have fixed the cause of your issue remember to rename main-disable.php back to main.php, otherwise your site will remain unprotected!
Now that you have access back to your site's control panel, let's fix the problem:
Go to Components, Admin Tools, Web Application Firewall and click the Configure WAF button. You can see your secret word. Jot it down or change it. If you changed it remember to click on Save & Close.
Now you can rename main-disable.php back to main.php.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!