Homepage is redirecting... strange

I had a new staff member attempting to block a customer from ordering, somehow she ended up in the theme code, she thinks, on her phone…

Now the homepage wont load, I may catch a quick glimpse before it is hijacked to this:

https://facemaster.ca/account/login?return_url=%2Faccount

Not a true redirect.

We have no login requirements in the preferences, and I cannot figure out how to stop the homepage from being hijacked by this script. The index.liquid looks fine to me

{{ content_for_index }}

I am totally lost and don’t want to break it further. The rest of the site works just fine, menus and navigation are good. PLLEEEASE help

OK I see a string she entered in the code when I look at view source, however I cant figure out how to delete it using shopify interface

{%- if customer and customer.tags contains ‘blocked’ -%} {% endif %} {%- if template contains ‘login’ -%} {% endif %}

I think I have it Jimmy rigged for now…