SQLI_CodeSniffer is a project mainly written in PHP, it's free.

SQLI_CodeSniffer is a wrapper module for PHP_CodeSniffer by Greg Sherwood.