Thanks for looking, the problem has been fixed, the server was on DSO so i made my hosting company switch it to Suphp, and that fixed the first issues. I believe the {Avoid direct access to php files (except wp-admin) *} was breaking all the admin and all other pages that ended with .php. Anyway hopefully this helps others. It seems to hide what I want to hide now. So thanks.
