fixed sprintf's to snprintf's for security
fixed issue where "album_artist" would be interperted as "album"