diff --git a/src/sbbs3/addfiles.c b/src/sbbs3/addfiles.c
index 04f34c672abc0eda5a09bd0b433390055c8eae9d..d984fb1c30c81d057694249b2e1ac161fe549d35 100644
--- a/src/sbbs3/addfiles.c
+++ b/src/sbbs3/addfiles.c
@@ -301,7 +301,7 @@ void addlist(char *inpath, uint dirnum, const char* uploader, uint dskip, uint s
 			continue;
 		}
 
-		sprintf(filepath, "%s%s", scfg.dir[dirnum]->path,fname);
+		SAFEPRINTF2(filepath, "%s%s", scfg.dir[dirnum]->path, fname);
 
 		if(strcspn(fname,"\\/|<>+[]:=\";,")!=strlen(fname)) {
 			fprintf(stderr, "!Illegal filename: %s\n", fname);