bug fixes

1. If function's parameter is ref, taint doesn't work.
2. Mysqli bug fix.
这块并没有给新得到的zval分配taint标记啊?