Support

That's one EXCELLENT catch! The thing is that the Admin Tools component parameters were separated in two groups. The basic group having the "visible" options, the "advanced" group having the hidden fields. This works well until you ask Joomla! to display the component parameters page. It decides that it should load only the main group and ignore the "advanced" parameters. This causes the form to submit with only the visible parameters, i.e. username and password in this case. Joomla! will then see that and replace all parameters it doesn't see in the form with their default values. Doh!!!

For the next version of Admin Tools I am going to change things a bit. All parameters will be in the same group and access to the visible parameters will be handled through a custom interface. That said, if someone has Super Administrator access (that's what it takes to edit component parameters) and is resourceful enough he will be able to reset Admin Tools settings. However, you shouldn't give Super Administrator access to people with that level of geekiness, experience and determination to break your site. In fact, such a person would find much easier ways to bypass restrictions -I can certainly think of at least FOUR much easier ways off the top of my head- if he wanted to harm your site. This brings us to the previous point: don't give such a person Super Administrator access! :)