--- src/modules.c.str	2009-01-20 15:47:00.000000000 +0100
+++ src/modules.c	2009-01-20 15:47:11.000000000 +0100
@@ -471,7 +471,7 @@
 {
 	GtkWidget *dialog;
 
-	dialog = gtk_message_dialog_new(NULL, 0, GTK_MESSAGE_INFO, GTK_BUTTONS_CLOSE, data);
+	dialog = gtk_message_dialog_new(NULL, 0, GTK_MESSAGE_INFO, GTK_BUTTONS_CLOSE, "%s", data);
 
 	gtk_dialog_run(GTK_DIALOG(dialog));
 	gtk_widget_destroy(dialog);
--- src/mud-connection-view.c.str	2009-01-20 15:47:21.000000000 +0100
+++ src/mud-connection-view.c	2009-01-20 15:47:34.000000000 +0100
@@ -235,7 +235,7 @@
 	for ( pc = buf, out = out_buf; *pc && (out-out_buf) < (4608-len-4);)
 		if ( !strncasecmp(pc, s, len))
 		{
-			out += sprintf (out, repl);
+			out += sprintf (out, "%s", repl);
 			pc += len;
 			found = TRUE;
 		}
--- src/mud-log.c.str	2009-01-20 15:47:44.000000000 +0100
+++ src/mud-log.c	2009-01-20 15:48:01.000000000 +0100
@@ -141,7 +141,7 @@
 		strftime(buf, 1024,
 				 _("\n*** Log starts *** %d/%m/%Y %H:%M:%S\n"),
 				 localtime(&t));
-		fprintf(log->priv->logfile, buf);
+		fprintf(log->priv->logfile, "%s", buf);
 	}
 
 	log->priv->active = TRUE;
@@ -178,7 +178,7 @@
 			_("\n *** Log stops *** %d/%m/%Y %H:%M:%S\n"),
 			localtime(&t));
 
-	fprintf(log->priv->logfile, buf);
+	fprintf(log->priv->logfile, "%s", buf);
 	fclose(log->priv->logfile);
 
 	log->priv->active = FALSE;