I had set AdminTools to auto-ban repeat offenders, so I reset that to No. My own IP had been put in the "never block" tab but I discovered today that it has changed since I last entered it, so I corrected that. But even with my correct IP set to "never block," I kept getting blocked (after re-enabling main.php) until I found the list of auto-blocked IPs (all "local" IPs) and removed them. Since then (knock wood, fingers crossed) I'm not being blocked after re-enabling main.php.
The IP workaround setting might be being changed for no apparent reason, or maybe just the setting that will work gets changed. Today I had to set it to No to keep from being blocked, whereas it was set to Yes when I logged in this morning. This setting in AdminTools has always been a bit of a mystery. Until today, the "recommended" setting was always opposite the one it was set to, regardless of what that was. Today suddenly they're in agreement, regardless of what I set it to. In other words, if I set it to No, it will say the recommended setting is No; if I set it to Yes, it says it should be Yes. Before today, it was always the other way around -- if it was set to No, it would recomment Yes, and vice versa.
That said, the recommended setting has always been meaningless anyway -- it's always been trial and error to find the setting that works. Right now the setting it likes is No. However, it was set to Yes when I logged in this morning and I'm pretty sure it would have been set to Yes previously -- I'm assuming this because the development site (where I test changes and then upload them using Kickstart) is currently set to Yes. The live installation (that was locking me out today) would have been the same, the last time I uploaded it after making changes (which was weeks ago).
I'm pretty sure this is not the first time the required IP workaround setting has changed. I've suspected this has been happening occasionally for a long time now. What could cause it to be changed? It's disturbing that the site can be offline if I don't happen to be around when it suddenly starts logging every visitor as a local IP and therefore blocking them all. This is what happened this morning.
I'm really baffled and would like to figure out how to prevent this from happening again. Many thanks in advance.