Login Bruteforce

[DSSoftware]

File: api.php
Method: send_register_message | UNAUTH

Description: It's possible to bruteforce all the logins, as API returns the error if email was taken.

Ways to mitigate this issue:

• Remove error message from send_register_message
• Remove error message from send_restore_email
• Change the corresponding error messages