MySQL不带where条件的UPDATE和DELETE 限制操作说明

据安全是业务的基石，但是DBA 总会遇到救火情况，业务误删除全表或者误更新错全表业务数据，导致服务不可用。

sql_safe_updates参数可以限制不带where条件的update/delete语句执行失败，这个参数设置后，可以防止业务bug/漏洞导致把整个表都更新或者删除（线上发生过的案例），也可以防止DBA在线误操作更新/删除整张表。

 

官方解释:

If set to 1, MySQL aborts UPDATE or DELETE statements that do not use a key in the WHERE clause or a LIMIT clause. (Specifically, UPDATE statements must have a WHERE clause that uses a key or a LIMIT clause, or both. DELETE statements must have both.) This makes it possible to catch UPDATE or DELETE statements where keys are not used properly and that would probably change or delete a large number of rows. The default value is 0.

意思是说

当sql_safe_updates设置为1时，UPDATE :要有where，并查询条件必须使用为索引字段，或者使用limit，或者两个条件同时存在，才能正常执行。DELETE:where条件中带有索引字段可删除，where中查询条件不是索引，得必须有limit。主要是防止UPDATE和DELETE 没有使用索引导致变更及删除大量数据。系统参数默认值为0

 

为了防止线上业务出现以下3种情况影响线上服务的正常使用和不小心全表数据删除:

1:没有加where条件的全表更新操作

2:加了where 条件字段，但是where 字段 没有走索引的表更新

3:全表delete 没有加where 条件 或者where 条件没有 走索引

 

如果业务开发存在如上的操作，数据库会出现如下错误。 

MySQL 报错如下：

 ERROR 1175 (HY000): You are using safe update mode and you tried to update a table without a WHERE that uses a KEY column

DDB 报错如下:

1. Caused by: java .sql .SQLException: You are using safe update mode and you tried to update a table without a WHERE that uses a KEY column
2. at com .mysql .jdbc .SQLError .createSQLException( SQLError .java :946)
3. at com .mysql .jdbc .MysqlIO .checkErrorPacket( MysqlIO .java :2985)
4. at com .mysql .jdbc .MysqlIO .sendCommand( MysqlIO .java :1631)

建议: DBA 开启此参数限制 ，可以避免线上业务数据误删除操作，但是需要先在测试库开启，这样可以可以先在测试库上补充短缺的表索引，测试验证没问题再部署到线上库 邮件部从去年开始已经在严选电商线上运行。

 

测试案例: 全局开启 sql_safe_updates 限制

1. [test]> show variables like 'sql_safe_updates';
2. +------------------+-------+
3. | Variable_name | Value |
4. +------------------+-------+
5. | sql_safe_updates | ON |
6. +------------------+-------+

1. CREATE TABLE `test_sql_safe` (
2. `id` int( 11) NOT NULL AUTO_INCREMENT,
3. `uid` bigint( 20) NOT NULL,
4. `status` int( 1) DEFAULT '0',
5. `amount` int( 11) NOT NULL DEFAULT '0',
6. `nuid` bigint( 20) NOT NULL,
7. PRIMARY KEY ( `id`),
8. KEY `idx_uid` ( `uid`)
9. ) ENGINE= InnoDB AUTO_INCREMENT= 7 DEFAULT CHARSET=utf8

1. [test]> select * from test_sql_safe;
2. +----+------+--------+--------+--------+
3. | id | uid | status | amount | nuid |
4. +----+------+--------+--------+--------+
5. | 1 | 1111 | 1 | 500 | 22222 |
6. | 2 | 2111 | 0 | 600 | 332222 |
7. | 3 | 3111 | 1 | 700 | 442222 |
8. | 4 | 4111 | 0 | 500 | 552222 |
9. | 5 | 5111 | 1 | 600 | 662222 |
10. +----+------+--------+--------+--------+

1. [test]> update test_sql_safe set amount = amount + 100;
2. ERROR 1175 (HY000): You are using safe update mode and you tried to update a table without a WHERE that uses a KEY column

1. test]> update test_sql_safe set amount = amount +100 limit 2;
2. Query OK, 2 rows affected (0.00 sec)
3. Rows matched: 2 Changed: 2 Warnings: 0

1. [test]> select * from test_sql_safe ;
2. +----+------+--------+--------+--------+
3. | id | uid | status | amount | nuid |
4. +----+------+--------+--------+--------+
5. | 1 | 1111 | 1 | 600 | 22222 |
6. | 2 | 2111 | 0 | 700 | 332222 |
7. | 3 | 3111 | 1 | 700 | 442222 |
8. | 4 | 4111 | 0 | 500 | 552222 |
9. | 5 | 5111 | 1 | 600 | 662222 |
10. +----+------+--------+--------+--------+

1. [ test]> update test_sql_safe set amount = amount + 100 where uid = 2111;
2. Query OK, 1 row affected (0.00 sec)
3. Rows matched: 1 Changed: 1 Warnings: 0

1. [test]> delete from test_sql_safe;
2. ERROR 1175 (HY000): You are using safe update mode and you tried to update a table without a WHERE that uses a KEY column

1. delete from test_sql_safe where status = 0;
2. ERROR 1175 (HY000): You are using safe update mode and you tried to update a table without a WHERE that uses a KEY column

1. delete from test_sql_safe where uid = 3111;
2. Query OK, 1 row affected (0.00 sec)

1. [ test]> delete from test_sql_safe where amount = 500 limit 1;
2. Query OK, 1 row affected (0.00 sec)

1. [test]> delete from test_sql_safe limit 1;
2. ERROR 1175 (HY000): You are using safe update mode and you tried to update a table without a WHERE that uses a