--- a/yms/yms.php	Sat Aug 01 01:05:45 2009 -0400
+++ b/yms/yms.php	Sat Aug 01 01:42:21 2009 -0400
@@ -63,7 +63,7 @@
   else if ( isset($_POST['claim_otp']) )
   {
     // do we need to validate a custom field?
-    if ( ($url = getConfig('yms_claim_auth_url')) && getConfig('yms_claim_auth_field') )
+    if ( ($url = getConfig('yms_claim_auth_url')) && getConfig('yms_claim_auth_field') && getConfig('yms_claim_auth_enable', 0) == 1 )
     {
       if ( ($result = yms_validate_custom_field($_POST['custom_field'], $_POST['claim_otp'], $url)) !== true )
         yms_send_response('n/a', $result);