Updated route

Big thanks to Antonious Papdopoulos (https://github.com/uyatashi) for pointing out this issue.

routes/admin.rb

@@ -56,6 +56,7 @@
 
 # create backup of all attachments
 get '/admin/attacments_backup' do
+  redirect to('/no_access') unless is_administrator?
   bdate = Time.now
   zip_file = './tmp/Attachments' + '-' + (bdate.strftime('%Y%m%d%H%M%S') + '.zip')
   Zip::File.open(zip_file, Zip::File::CREATE) do |zipfile|