Where did the mysterious spam registration on the bitrix site come from?

Question

1C-Bitrix

Good afternoon.
There is an information site on Bitrix.
Until recently, there was only one user created from the very beginning.
The key point is the following - there is no registration form on the site, the authorization component does not appear anywhere on any links.
Imagine my surprise when I discovered that someone was able to register in some mysterious way. Another user has been added (fortunately with default rights), registration is completely spammy.
How did you manage to do this and how to protect yourself from it? ..

Answer 1

In Bitrix, the authorization and registration components (system.auth.registration and system.auth.form) are connected at the core level and the form itself is not needed, just send post data