Support

Hello Kiera,

we have a detailed walkthrough here that will guide you in the steps on how restore your site after an hack occurred.

If your site is compromised, changing the secret param is not the solution. The solution is explained inside the guide I posted before, where it suggests to revert to a previous backup (thing that you already did on your own).

If your site is vulnerable (ie a vulnerable extension, another site on the same server compromised and the server is poor configured etc etc), an attacker has access to all of your files. It's pretty easy to change some configuration values.

Finally, blocking all non existent pages is a really bad thing: any attacker could simply perform a Denial of Service by visiting ANY of your pages, since you are going to log and store all those information to block the user.

Regarding changing the administrator folder, the feature is still there, you can see that inside the WAF configuration page. We no longer offer support since we saw that the majority of servers have a poor setup, leading to users being blocked and locked out from their sites as soon as they enabled such feature.

If you are using a v6 IP, you use to save that one inside Admin Tools.
Please remember that if you add your IP to the Whitelist, you have to enable the option Allow only access to Whitelisted IP inside WAF configuration page.
If you simply don't want to be blocked, please add your IP in the field Never block these IP inside WAF configuration page.