Moved to Moodle 2.5.3. Using self-enrollment with Paypal.
I found that students (who should be paying) could bypass Paypal and self-enroll for free, unless I blocked that access by putting a difficult Enrollment Key in the self-enrollment settings, forcing them to choose the Paypal button.
Is this the normal procedure? I don't recall having to use a blocking enrollment key in earlier versions. Earlier, at least in 1.9+, having self-enrollment and Paypal led to a confirmation page with a single button on it: Paypal.
Currently, the confirmation page shows two buttons: Enroll Me (self-enrollment) and Paypal.
If this is a new feature, is there documentation? If I have misunderstood this issue, I apologize.