May be even better

pwned.c

@@ -15,8 +15,7 @@ char *getURL(const char* hash) {
 	char *url = malloc(URL_SIZE);
 	if (url == NULL) return NULL;
 
-	strncpy(url, BASEURL, URL_SIZE - 1);
-	strncat(url, hash, HASH_PREFIX_LENGTH);
+	snprintf(url, URL_SIZE, "%s%s", BASEURL, hash);
 
 	return url;
 }