Tech Musings

Sep 7, 2026 · Databases

MySQL Subquery Column Name Escaping: Silent Full-Table Update/Delete Risk

MySQL silently resolves missing column names in subqueries to outer scope columns, turning filters into correlated subqueries that always evaluate true, causing full-table updates or deletes without errors or warnings; no sql_mode prevents this behavior.