多选题

下列哪部分代码片段如果使用不当会导致安全漏洞？

Question

A. <?php ... $sql = "select * from admin where id=".$_GET['id'] $result = mysql_query($sql) ...

B. <?php $username = $_GET['name'] echo htmlspecialchars($username) ...

C. <?php ... $file = $_GET['file'] echo file_get_contents($file) ...

D. <?php $string = $_GET['text'] $pattern = '/(\w+) (\d+), (\d+)/ie' $replacement = '${1}1,$3' echo preg_replace($pattern, $replacement, $string) ?>