Spez as far as I know, users which didn't confirm their emails cant like the message. So, use LIKE instead of LOGIN. And fake users cant rich this content. However, when you scroll big discussion, e.g. 500+ messages, sometimes LOGIN/LIKE/REPLY outputs directly in plain text with hided content. Also some parts of content can be displayed unprotected in "All discussion" list.
Conclusion: don't put your hided content in begin of message (will be seen in "All discussion") and put it only in 1st message (because sometimes scrolling will leak your hided data).
datlechin fixes are much needed. It is also work with Flarum 1.8.9.
