--- lbbs/src/database.c	2025/05/04 14:54:55	1.11
+++ lbbs/src/database.c	2025/05/05 11:46:04	1.12
@@ -54,7 +54,7 @@ MYSQL *db_open()
 		return NULL;
 	}
 
-	sprintf(sql,
+	snprintf(sql, sizeof(sql),
 			"SET time_zone = '%s'",
 			DB_timezone);