Predefined constants of wrong php version are used

[erikvanderschaaf]

Bug report

It seems that the wrong constants are used for analyzing the code. I run php version 8.2.4 on my local environment, but our production environment is on php 7.3.33. So I've put phpVersion: 70333 in our phpstan.neon file, and it's also in the platform section of our composer.json.

Since the password constants have been changed from int to string in php 7.4 it yields an error on the password_hash function.

Parameter #2 $algo of function password_hash expects int, string given.

https://www.php.net/password_hash
https://www.php.net/manual/en/password.constants.php

Code snippet that reproduces the problem

https://phpstan.org/r/3a20f288-2c07-4fab-ab05-0b2e3512eb7e

Expected output

Since we use the PASSWORD_BCRYPT constant in our code, we would expect no errors for this line of code.

Did PHPStan help you today? Did it make you happy in any way?

We've implemented phpstan on our projects as of today, we're sure it will make our code better in the future

[phpstan-bot]

@erikvanderschaaf After the latest push in 1.11.x, PHPStan now reports different result with your code snippet:

@@ @@
-PHP 7.4 – 8.2
-==========
-
-No errors
-
-PHP 7.2 – 7.3 (1 error)
-==========
-
-3: Parameter #2 $algo of function password_hash expects int, string given.
+No errors

[ondrejmirtes]

Fixed phpstan/phpstan-src@fc4e589

[github-actions]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.