.../all/modules/contrib/security_questions/security_questions.module  | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/sites/all/modules/contrib/security_questions/security_questions.module b/sites/all/modules/contrib/security_questions/security_questions.module
index 2750079..c9edf2c 100644
--- a/sites/all/modules/contrib/security_questions/security_questions.module
+++ b/sites/all/modules/contrib/security_questions/security_questions.module
@@ -141,6 +141,10 @@ function security_questions_form_user_login_alter(&$form, &$form_state, $form_id
  * Adds a question challenge to the login block.
  */
 function security_questions_form_user_login_block_alter(&$form, &$form_state, $form_id) {
+  // Abort if the login forms are not protected.
+  if (!variable_get('security_questions_user_login', FALSE)) {
+    return;
+  }
   // Redirect login block submissions to the main login form.
   // @todo Is there a better way to hand off from the login block to /user?
   $form['form_id']['#value'] = 'user_login';