But, wouldn't someone that knows the Zen Cart files, be able to access the registration page by typing the URL directly and create his account without approval?