Taint checking? Just say no , according to php developers (I must admit, I stopped reading after first two replies).
Pixy  tries to address that (in Java, sic!) and fails on my test code. Only hope left (as it seems) is generation of AST tree using phc  or using Parse_Tree . Both look like a workable way to get AST tree, but I really wouldn't like to implement taint analysis for language which I don't particularly like.
Any suggestions from idle readers of my blog?
OOH, this day would be more‑or‑less complete waste if I didn't stumble upon hypertable  which seem like nice implementation of bigtable in sane language (C/C++). Now if I could just find bunch of machines to run it on...