You have done something incorrectly. I checked your site and the %22 | order condition is still in effect/has not been successfully changed. Double check that you are doing ALL of the Custom Code steps.
1. Copy the modified (order| has been removed) BPS Query String Exploits code below to this BPS Root Custom Code text box: CUSTOM CODE BPSQSE BPS QUERY STRING EXPLOITS:
2. Click the Save Root Custom Code button.
3. Go to the Security Modes page, click the Create secure.htaccess File AutoMagic button and activate Root folder BulletProof Mode.