http://www.abysssec.com/blog/2010/03/attention-in-php-source-code-auditing/

http://code.google.com/p/pasc2at/wiki/SimplifiedChinese