Support

 A super user is being sent to front end when trying to log in the back end. User is in the whitelist and not in any blacklist, also in the never deny space.
The enter nhcla.com/administrator and the address changes to cnhcla.com and they are sent to the front end.
This also happened to another person that was to work on the site.

Any ideas on this one?

Please check Web Application Firewall, Configure WAF, on the first tab, the Secret URL parameter. If there is a value in this field, your back end login URL changes and must be:

www.mysite.com/administrator/index.php?secret

Where "secret" is the value in the field.

Normally being in the "never block" list will allow you to log in without the parameter, but if they have a dynamic IP address, the never block and whitelist won't work for them. If you use the plain URL, you are normally redirected to the home page.

She does have a dynamic IP, but I made sure the correct one was entered and it did not change for a try.
used url = http://nhcla.com/administrator/ there is no secret in admin
I tend to log in fine though. I also have a dynamic IP, but will remain the same unless they change my modem(Spectrum's words, not mine)
I have turned admin off for now so she can work on her site. I did so by changing something in the back end I found on this site.

ANY other thoughts?

I love how this normally works.

A long shot. Also on that first tab in Configure WAF, at the bottom of the screen, is there any value in the online hours field?

No
from (hh:mm) to (hh:mm)

Are there any redirects in Admin Tools? Do we know where cnhcla.com is coming from?

It is nhcla.com. hosted on Namecheap as all my sites are with a reseller account.
no redirects anywhere.
She is in central Florida and has her ISP coming today. They think she may have an errant modem.

But a hardware issue wouldn't explain why it works with Admin Tools disabled. Please let me know what you find out about the modem.

She did a system restore on her computer and can now get in with admin tools turned off. Will test tomorrow with admin turned back on.
the modem she has can change the IP address if it has some issues per her ISP.

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.