The linked article appears to be slashdotted, there is a mirror at http://eurekalert.precor-incorporated.com/

There is a similar tool available under a BSD license called PHPAudit, but it does seem to generate a few more false positives than the one linked in this article... It's site is http://phpaudit.precor-incorporated.com/