That is easy to call send_html_mail in post of Register. On the contrary, Exposing post of sendMail is dangerous. Anyone who knows address can send mails.
send_html_mail
post
Register
sendMail