Vào User -> User Group Permissons -> Unregistered / Unconfirmed View attachments to posts - Chọn Never