Accidentally changed WP URL to site URL, can't login now

What is in your root WordPress .htaccess file?

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /cc/
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /cc/index.php [L]
</IfModule>

# END WordPress

# Prevents directory listing
Options -Indexes

# protect wpconfig.php
<files wp-config.php>
order allow,deny
deny from all
</files>

I manually edited wp-config locally in a text editor and re-uploaded it to the server, overwriting the existing file, so even thought .htaccess says disallow any edits, I believe I can get past that.

That file needs re-ordering so that the WordPress permalink rewrites are always the very last block in the file:

# Prevents directory listing
Options -Indexes

# protect wpconfig.php
<files wp-config.php>
order allow,deny
deny from all
</files>

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /cc/
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /cc/index.php [L]
</IfModule>

# END WordPress

But, apart from that, I can’t see anything in there that would cause a problem. Have you tried resetting the plugins folder by FTP or phpMyAdmin?

I have not used PHPMyAdmin yet, i’ve only had to make a few small changes to php files and have done them in CuteHTML and then uploaded to the server.

I have not tried that other link you supplied, I’ll have to look into that… but what I fear is that the security plugin (Better WP Security in this case) altered files and so disabling it won’t un-alter them, so may not help. I also made the mistake with BWPS of disabling JetPack/Social Sharing which I have yet to figure out how to properly re-enable.

What I was thinking was since I was working on the site privately before officially launching (ie simply pointing the domain to wordpress instead of the placeholder page), and since the admin page is set as an extension of the domain now rather than as an extension of the server, if I point the domain at wordpress, then the /wp-admin page would become accessible again (essentially like turning the tumbler in a lock to create a valid pathway for the key)? Or is that not correct? I updated the nameservers in godaddy an hour ago but it’s still not pointing to wordpress (yet).

EDIT – As seems to have been the case a few times now – updating server files/settings in WP takes a good 15-20 mins to “take effect”, as I just managed to (by accident) stumble onto a valid login page and am now in the back end (and can see the WP site URL greyed out as what I changed it to from manually editing the wp-config file. Ok, this is a good start. Now I just have to figure out how to point the domain here properly!

Try asking about this in the Better WP Security sub-forum.