Error Code: 1290. The MySQL server is running with the --secure-file-priv option so it cannot execute this statement

Question

I encountered such a problem: Error Code: 1290. The MySQL server is running with the --secure-file-priv option so it cannot execute this statement when I tried to execute MySQL statement (Windows):

SELECT *
FROM xxxx
WHERE XXX
INTO OUTFILE 'report.csv'
    FIELDS TERMINATED BY '#'
    ENCLOSED BY '"'
    LINES TERMINATED BY '\n'

When I execute it without:

INTO OUTFILE 'report.csv'
    FIELDS TERMINATED BY '#'
    ENCLOSED BY '"'
    LINES TERMINATED BY '\n'

Then it works. Also, the same statement with INTO OUTFILE xxx actually worked before I reinstalled the MySQL server.

Anybody has ideas how to deal with this error?

isedwards · Answer 1 · 2020-03-03T18:11:34.483

A quick answer, that doesn't require you to edit any configuration files (and works on other operating systems as well as Windows), is to just find the directory that you are allowed to save to using:

mysql> SHOW VARIABLES LIKE "secure_file_priv";
+------------------+-----------------------+
| Variable_name    | Value                 |
+------------------+-----------------------+
| secure_file_priv | /var/lib/mysql-files/ |
+------------------+-----------------------+
1 row in set (0.06 sec)

And then make sure you use that directory in your SELECT statement's INTO OUTFILE clause:

SELECT *
FROM xxxx
WHERE XXX
INTO OUTFILE '/var/lib/mysql-files/report.csv'
    FIELDS TERMINATED BY '#'
    ENCLOSED BY '"'
    LINES TERMINATED BY '\n'

Original answer

I've had the same problem since upgrading from MySQL 5.6.25 to 5.6.26.

In my case (on Windows), looking at the MySQL56 Windows service shows me that the options/settings file that is being used when the service starts is C:\ProgramData\MySQL\MySQL Server 5.6\my.ini

On linux the two most common locations are /etc/my.cnf or /etc/mysql/my.cnf.

Opening this file I can see that the secure-file-priv option has been added under the [mysqld] group in this new version of MySQL Server with a default value:

secure-file-priv="C:/ProgramData/MySQL/MySQL Server 5.6/Uploads"

You could comment this (if you're in a non-production environment), or experiment with changing the setting (recently I had to set secure-file-priv = "" in order to disable the default). Don't forget to restart the service after making changes.

Alternatively, you could try saving your output into the permitted folder (the location may vary depending on your installation):

SELECT *
FROM xxxx
WHERE XXX
INTO OUTFILE 'C:/ProgramData/MySQL/MySQL Server 5.6/Uploads/report.csv'
    FIELDS TERMINATED BY '#'
    ENCLOSED BY '"'
    LINES TERMINATED BY '\n'

It's more common to have comma seperate values using FIELDS TERMINATED BY ','. See below for an example (also showing a Linux path):

SELECT *
FROM table
INTO OUTFILE '/var/lib/mysql-files/report.csv'
    FIELDS TERMINATED BY ',' ENCLOSED BY '"'
    ESCAPED BY ''
    LINES TERMINATED BY '\n';

I disabled this security option by adding `secure-file-priv=` to my.ini. You can check the value of the open by using the ´show variables´ command a looking for secure_file_priv variable. For documentation about the various values, see: https://dev.mysql.com/doc/refman/5.7/en/server-system-variables.html#sysvar_secure_file_priv — Juha Palomäki, Aug 29 '16 at 00:17
I wonder how I can restart the mysql service on windows 10 since I tried command like `net stop mysql` and `mysqld stop` but it does not work and finally I have to restart my computer. — LancelotHolmes, Oct 28 '16 at 07:00
I changed `my.ini` and restarted `mysql56` and I still get this error :( — Maria Ines Parnisari, Nov 15 '16 at 03:57
Did not work for me. Sheesh. They TRIED to make it hard? Basically typing `mysql -u root -p < statements` as I usually do when reading statements from a file. Now I get --help info when I hit enter xD — brat, Feb 07 '21 at 18:41

score 9 · Answer 2 · answered Mar 08 '17 at 11:02

9

If you changed my.ini and restarted mysql and you still get this error please check your file path and replace "\" to "/". I solved my proplem after replacing.

answered Mar 08 '17 at 11:02

zgormez

429
5
9

score 2 · Answer 3 · edited May 27 '20 at 07:05

2

I had to set

C:\ProgramData\MySQL\MySQL Server 8.0/my.ini  secure-file-priv=""

When I commented line with secure-file-priv, secure-file-priv was null and I couldn't download data.

edited May 27 '20 at 07:05

Markus

2,265
5
28
54

answered May 26 '20 at 14:28

Wieslaw Olborski

187
1
7

user10186832 · Answer 4 · 2022-12-29T10:52:12.367

Error Code: 1290. The MySQL server is running with the --secure-file-priv option so it cannot execute this statement

TL;DR

Specify the secure-file-priv folder with double back slash and also explicitly specify the output file with double back slashes and the OPs original issue is solved.

The detail

The longer answer is as follows - On Windows 11 64-bit operating system, x64-based processor, build 22621.963, Version 22H2 with MySQL installed using the web installer .MSI file as a developer configuration.

SELECT VERSION(); gives '8.0.31'

Help > About Workbench gives Version 8.0.31 build 2235049 CE 64 bits

The defaults file on Windows 11 is called "my.ini" and is in C:\ProgramData\MySQL\MySQL Server 8.0

C:\ProgramData is a hidden folder.

The default specification in my.ini is secure-file-priv="C:/ProgramData/MySQL/MySQL Server 8.0/Uploads"

execute SHOW VARIABLES LIKE "secure_file_priv";

copy and paste the row gives 'secure_file_priv', 'C:\\ProgramData\\MySQL\\MySQL Server 8.0\\Uploads\\'

which renders as 'C:\ProgramData\MySQL\MySQL Server 8.0\Uploads\' in Workbench

Note the backslash, forward slash and double back slash syntax of these folder specifications

execute the OP's code

SELECT * FROM shippers INTO OUTFILE 'report.csv'

gives error 1290

execute the OP's code

SELECT * FROM shippers INTO OUTFILE 'report.csv'
    FIELDS TERMINATED BY '#' ENCLOSED BY '"' LINES TERMINATED BY '\n';

gives error 1290

next change my.ini to secure-file-priv="" and restart MySQL using Open Services > Stop Service MySQL80 > then Start Service MySQL80 then close and reopen Workbench.

secure-file-priv is now switched off

SHOW VARIABLES LIKE "secure_file_priv";


Variable_name, Value

'secure_file_priv', ''

execute the OP's code

SELECT * FROM shippers INTO OUTFILE 'report.csv'

The file report.csv is generated in C:\ProgramData\MySQL\MySQL Server 8.0\Data\northwind

northwind is the database name

The output file is tab separated, Excel does not recognise this as a .CSV file and renders it as a single column

"1  Speedy Express  (503) 555-9831"
"2  United Package  (503) 555-3199"
"3  Federal Shipping    (503) 555-9931"
"1  Speedy Express  (503) 555-9831"
"2  United Package  (503) 555-3199"
"3  Federal Shipping    (503) 555-9931"

execute the OP's code

SELECT * FROM shippers INTO OUTFILE 'report.csv'
    FIELDS TERMINATED BY '#' ENCLOSED BY '"' LINES TERMINATED BY '\n';

file report.csv is generated in C:\ProgramData\MySQL\MySQL Server 8.0\Data\northwind

The output file is as specified in the SQL code with text fields enclosed by quotes and separated by # -

1#"Speedy Express"#"(503) 555-9831"
2#"United Package"#"(503) 555-3199"
3#"Federal Shipping"#"(503) 555-9931"
1#"Speedy Express"#"(503) 555-9831"
2#"United Package"#"(503) 555-3199"
3#"Federal Shipping"#"(503) 555-9931"

Next set secure_file_priv="C:\\ProgramData\\MySQL\\MySQL Server 8.0\\Uploads\\" in my.ini and restart MySQL and Workbench

execute the OP's code

SELECT * FROM shippers INTO OUTFILE 'report.csv'

Error 1290 because "C:\ProgramData\MySQL\MySQL Server 8.0\Data\northwind" is not the secure file output folder.

execute the following code

SELECT * FROM shippers INTO OUTFILE "C:\\ProgramData\\MySQL\\MySQL Server 8.0\\Uploads\\report.csv"

file report.csv is generated in "C:\ProgramData\MySQL\MySQL Server 8.0\Uploads"

Error Code: 1290. The MySQL server is running with the --secure-file-priv option so it cannot execute this statement

4 Answers4

Linked