I wonder, if a solution exists, which statically analyzes PHP source-files.
I’m aware of PHPLint and some other solution, which e.g. check code style.
My interest is more general: I’d like to analyze web-specific problem, e.g. non-escaped queries and such.
Does such an – probably conceptually incomplete – solution exist?
Probably this is of use to you? RIPS – A static source code analyser for vulnerabilities in PHP scripts