Use snprintf() in place of strnc{at,py} for string safety; add personal reminder to do url-encoding