don't tell me you really index such parametrized urls? If yes - this has an outstanding negative impact.
If they are noindex-ed (what would be correct), then don't care about their canonicals and hreflangs. Your parameter-less urls are for Google - there should canonicals and hreflangs be correct.
<link rel="canonical" href="<? php echo DEFAULT_CANONICAL; ?>" >
There is an error in the opening PHP tag that will result in this error, and without any feedback to comments we can only assume this is as written in your actual code - not simply a typo in your question?
The erroneous space in <? php (it should be <?php) will fail to get ...