Text this: Benchmarking Static Analysis for PHP Applications Security