Use safer string function

Signed-off-by: Sup Yut Sum <ch3cooli@gmail.com>