diff --git a/src/sqlite.c b/src/sqlite.c
index fd46c4f1f..64819bca1 100644
--- a/src/sqlite.c
+++ b/src/sqlite.c
@@ -123,7 +123,7 @@ static void update_faction(sqlite3 *db, const faction *f) {
         "INSERT INTO faction_data (faction_id, code, name, email, lang, turn)"
         " VALUES (?, ?, ?, ?, ?, ?)";
     sqlite3_stmt *stmt = 0;
-    strcpy(code, itoa36(f->no));
+    strncpy(code, itoa36(f->no), sizeof(code));
     sqlite3_prepare_v2(db, sql, -1, &stmt, 0);
     sqlite3_bind_int(stmt, 1, f->subscription);
     sqlite3_bind_text(stmt, 2, code, -1, SQLITE_STATIC);