All fixed. The site was hosted as an add-on domain and the plugin BulletProof Security on the parent domain was the cause. Disabled and uninstalled and all is sweet again. Not sure why this happened as I have used BPS in the past with no issues at all. Oh well.
