PHP ReflectionMethod::isProtected() Method: Usage and Examples

When building tools that inspect PHP code, ReflectionMethod::isProtected() helps answer a focused question: reports whether the method has protected visibility.

Reflection is useful in framework tooling, dependency injection, testing, code inspection and debugging.

What Is ReflectionMethod::isProtected()?

Reports whether the method has protected visibility.

Its method signature is:

public function isProtected(): bool

This method has no required arguments.

Return value: bool

Example 1: Inspect a reflected method

Start with a self-contained PHP declaration and inspect the method result.

<?php

declare(strict_types=1);

#[Attribute(Attribute::TARGET_METHOD)]
class ActionLabel { public function __construct(public string $label) {} }
interface Action { public function execute(string $message): string; }
abstract class AbstractAction { abstract public function perform(): void; }
class MailAction implements Action {
    public function __construct(public string $name = 'Mail') {}
    #[ActionLabel('send')]
    public function execute(string $message): string { return $this->name . ': ' . $message; }
    protected function verify(): bool { return true; }
    private function internal(): string { return 'secret'; }
    final public function finalize(): string { return 'complete'; }
    public static function version(): int { return 2; }
    public function __destruct() {}
}
class SmsAction extends MailAction { public function execute(string $message): string { return parent::execute($message); } }
class VerifiedAction extends MailAction { protected function verify(): bool { return false; } }

$methodReflection = new ReflectionMethod(MailAction::class, "verify");

$result = $methodReflection->isProtected();
var_dump($result);

Output:

bool(true)

Explanation: Reports whether the method has protected visibility.

Example 2: Compare an inherited method

Next, change the reflected declaration or parameter to observe a related situation.

<?php

declare(strict_types=1);

#[Attribute(Attribute::TARGET_METHOD)]
class ActionLabel { public function __construct(public string $label) {} }
interface Action { public function execute(string $message): string; }
abstract class AbstractAction { abstract public function perform(): void; }
class MailAction implements Action {
    public function __construct(public string $name = 'Mail') {}
    #[ActionLabel('send')]
    public function execute(string $message): string { return $this->name . ': ' . $message; }
    protected function verify(): bool { return true; }
    private function internal(): string { return 'secret'; }
    final public function finalize(): string { return 'complete'; }
    public static function version(): int { return 2; }
    public function __destruct() {}
}
class SmsAction extends MailAction { public function execute(string $message): string { return parent::execute($message); } }
class VerifiedAction extends MailAction { protected function verify(): bool { return false; } }

$methodReflection = new ReflectionMethod(SmsAction::class, "verify");

$result = $methodReflection->isProtected();
var_dump($result);

// Check the returned value type before using the result.
echo "\nResult type: " . get_debug_type($result);

Output:

bool(true)

Result type: bool

Explanation: Protected methods cannot ordinarily be called from unrelated code.

Practical Example: Inspect application method metadata

This final case shows how the same API can be used when inspecting application definitions.

<?php

declare(strict_types=1);

#[Attribute(Attribute::TARGET_METHOD)]
class ActionLabel { public function __construct(public string $label) {} }
interface Action { public function execute(string $message): string; }
abstract class AbstractAction { abstract public function perform(): void; }
class MailAction implements Action {
    public function __construct(public string $name = 'Mail') {}
    #[ActionLabel('send')]
    public function execute(string $message): string { return $this->name . ': ' . $message; }
    protected function verify(): bool { return true; }
    private function internal(): string { return 'secret'; }
    final public function finalize(): string { return 'complete'; }
    public static function version(): int { return 2; }
    public function __destruct() {}
}
class SmsAction extends MailAction { public function execute(string $message): string { return parent::execute($message); } }
class VerifiedAction extends MailAction { protected function verify(): bool { return false; } }

$methodReflection = new ReflectionMethod(MailAction::class, "verify");

$result = $methodReflection->isProtected();
var_dump($result);

// Use the reflection result in a simple decision.
if (is_bool($result)) {
    echo "\nStatus: " . ($result ? "yes" : "no");
} elseif (is_array($result)) {
    echo "\nEntries: " . count($result);
} elseif ($result === null) {
    echo "\nNo value returned";
} else {
    echo "\nReflection result available";
}

Output:

bool(true)

Status: yes

Explanation: isPrivate and isPublic detect other visibility settings.

Important Behavior and Edge Cases

• Protected methods cannot ordinarily be called from unrelated code.
• isPrivate and isPublic detect other visibility settings.
• Reflection describes declarations and runtime state; requesting metadata does not automatically validate or sanitize application input.

Comparison With Related Approaches

Common Beginner Mistakes

Key Takeaways

• Reports whether the method has protected visibility.
• Protected methods cannot ordinarily be called from unrelated code.
• isPrivate and isPublic detect other visibility settings.

Use ReflectionMethod::isProtected() when you need the precise metadata or behavior demonstrated above. Keep the target declaration and relevant PHP version in mind when adapting the examples.