Question

I am programming in C in Unix,
and I am using gets to read the inputs from keyboard.
I always get this warning and the program stop running:

warning: this program uses gets(), which is unsafe.

Can anybody tell me the reason why this is happening?

Answer 1

As mentioned in the previous answers use fgets instead of gets.

But it is not like gets doesn’t work at all, it is just very very unsafe. My guess is that you have a bug in your code that would appear with fgets as well so please post your source.

EDIT
Based on the updated information you gave in your comment I have a few suggestions.

• I recommend searching for a good C tutorial in your native language, Google is your friend here. As a book I would recommend The C Programming Language

• If you have new information it is a good idea to edit them into your original post, especially if it is code, it will make it easier for people to understand what you mean.

• You are trying to read a string, basically an array of characters, into a single character, that will of course fail. What you want to do is something like the following.

  char username[256];
  char password[256];
  scanf("%s%s", username, password);
  

  Feel free to comment/edit, I am very rusty even in basic C.

EDIT 2 As jamesdlin warned, usage of scanf is as dangerous as gets.