Description:
------------
The private and protected variables ar not protected. print_f or var_dump display them without any errors.
Var_dump and print_f should have access from inside, but no outside.  

Reproduce code:
---------------
<?php

class Foo {
  private $password='pass1';
}

$foo = new Foo();

print_r($foo);

?>

Expected result:
----------------
null

Actual result:
--------------
Foo Object ( [password:private] => pass1 )