I am interested in doing some static analysis on a PHP codebase to detect security issues beyond greping every $_POST, $_REQUEST etc and manually checking to see that they are handled properly.
...