Description:
------------
A protected function is accessible publicly if a child class has a public function that instantiates the child object and calls the protected function. This public function can then be called publicly. I would have expected a fatal error to be produced from the protected function call.

Is this intended behaviour? Or should I declare the function as public in the case of this not being the desired functionality and may change at a later point?

Reproduce code:
---------------
<?php
	class parentClass {
		protected function protectedFunction() {
			print("This is a protected function.");
		}
	}
	
	class childClass extends parentClass {
		public function publicFunction() {
			$childClass = new childClass();
			$childClass->protectedFunction();
		}
	}
	
	$childClass = new childClass();
	$childClass->publicFunction();
?>

Expected result:
----------------
Fatal Error on line 11, $childClass->protectedFunction().

Actual result:
--------------
This is a protected function.