diff --git a/src/www_email.c b/src/www_email.c
index 05b436b..20c3ae5 100644
--- a/src/www_email.c
+++ b/src/www_email.c
@@ -141,72 +141,20 @@ int www_send_email(struct user_record *user, char *recipient, char *subject, cha
 }
 
 char *www_new_email() {
-	char *page;
-	int max_len;
-	int len;
-	char buffer[4096];
+	stralloc page = EMPTY_STRALLOC;
 
-	page = (char *)malloz(4096);
-	max_len = 4096;
-	len = 0;
+	stralloc_copys(&page, "<div class=\"content-header\"><h2>New Email</h2></div>\n");
+	stralloc_cats(&page, "<form action=\"");
+	stralloc_cats(&page, conf.www_url);
+	stralloc_cats(&page, "email/\" method=\"POST\" onsubmit=\"return validate()\" enctype=\"application/x-www-form-urlencoded\">\n");
+	stralloc_cats(&page, "To : <input type=\"text\" name=\"recipient\" id=\"recipient\" /><br />\n");
+	stralloc_cats(&page, "Subject : <input type=\"text\" name=\"subject\" id=\"subject\" /><br />\n");
+	stralloc_cats(&page, "<textarea name=\"body\" wrap=\"hard\" rows=\"25\" cols=\"79\" id=\"body\"></textarea>\n<br />");
+	stralloc_cats(&page, "<input type=\"submit\" name=\"submit\" value=\"Send\" />\n<br />");
+	stralloc_cats(&page, "</form>\n");
+	stralloc_0(&page);
 
-	sprintf(buffer, "<div class=\"content-header\"><h2>New Email</h2></div>\n");
-	if (len + strlen(buffer) > max_len - 1) {
-		max_len += 4096;
-		page = (char *)realloc(page, max_len);
-	}
-	strcat(page, buffer);
-	len += strlen(buffer);
-
-	sprintf(buffer, "<form action=\"%semail/\" method=\"POST\" onsubmit=\"return validate()\" enctype=\"application/x-www-form-urlencoded\">\n", conf.www_url);
-	if (len + strlen(buffer) > max_len - 1) {
-		max_len += 4096;
-		page = (char *)realloc(page, max_len);
-	}
-	strcat(page, buffer);
-	len += strlen(buffer);
-
-	sprintf(buffer, "To : <input type=\"text\" name=\"recipient\" id=\"recipient\" /><br />\n");
-	if (len + strlen(buffer) > max_len - 1) {
-		max_len += 4096;
-		page = (char *)realloc(page, max_len);
-	}
-	strcat(page, buffer);
-	len += strlen(buffer);
-
-	sprintf(buffer, "Subject : <input type=\"text\" name=\"subject\" id=\"subject\" /><br />\n");
-	if (len + strlen(buffer) > max_len - 1) {
-		max_len += 4096;
-		page = (char *)realloc(page, max_len);
-	}
-	strcat(page, buffer);
-	len += strlen(buffer);
-
-	sprintf(buffer, "<textarea name=\"body\" wrap=\"hard\" rows=\"25\" cols=\"79\" id=\"body\"></textarea>\n<br />");
-	if (len + strlen(buffer) > max_len - 1) {
-		max_len += 4096;
-		page = (char *)realloc(page, max_len);
-	}
-	strcat(page, buffer);
-	len += strlen(buffer);
-
-	sprintf(buffer, "<input type=\"submit\" name=\"submit\" value=\"Send\" />\n<br />");
-	if (len + strlen(buffer) > max_len - 1) {
-		max_len += 4096;
-		page = (char *)realloc(page, max_len);
-	}
-	strcat(page, buffer);
-	len += strlen(buffer);
-
-	sprintf(buffer, "</form>\n");
-	if (len + strlen(buffer) > max_len - 1) {
-		max_len += 4096;
-		page = (char *)realloc(page, max_len);
-	}
-	strcat(page, buffer);
-	len += strlen(buffer);
-
-	return page;
+	return page.s;
 }
 
 char *www_email_display(struct user_record *user, int email) {
diff --git a/src/www_last10.c b/src/www_last10.c
index 8476d24..af202d5 100644
--- a/src/www_last10.c
+++ b/src/www_last10.c
@@ -1,88 +1,57 @@
 #if defined(ENABLE_WWW)
 
-#include <string.h>
 #include <time.h>
 #include <stdlib.h>
+#include <string.h>
+
 #include "bbs.h"
 
 extern struct bbs_config conf;
 
 char *www_last10() {
-	char *page;
-	int max_len;
-	int len;
-	char buffer[4096];
+	size_t n = 0;
+	stralloc page = EMPTY_STRALLOC;
 	struct last10_callers callers[10];
 
-	int i, z;
-	struct tm l10_time;
 	FILE *fptr = fopen("last10v2.dat", "rb");
-
 	if (fptr != NULL) {
-
-		for (i = 0; i < 10; i++) {
-			if (fread(&callers[i], sizeof(struct last10_callers), 1, fptr) < 1) {
+		for ( ; n < 10; ++n)
+			if (fread(&callers[n], sizeof(callers[n]), 1, fptr) != sizeof(callers[n]))
 				break;
-			}
-		}
-
 		fclose(fptr);
-	} else {
-		i = 0;
 	}
 
-	page = (char *)malloz(4096);
-	max_len = 4096;
-	len = 0;
+	stralloc_copys(&page, "<div class=\"content-header\"><h2>Last 10 Callers</h2></div>\n");
+	stralloc_cats(&page, "<div class=\"div-table\">\n");
+	for (size_t i = 0; i < n; ++i) {
+		struct tm called;
+		char buffer[32];
 
-	sprintf(buffer, "<div class=\"content-header\"><h2>Last 10 Callers</h2></div>\n");
-	if (len + strlen(buffer) > max_len - 1) {
-		max_len += 4096;
-		page = (char *)realloc(page, max_len);
-	}
-	strcat(page, buffer);
-	len += strlen(buffer);
+		stralloc_cats(&page, "<div class=\"last10-row\"><div class=\"last10-name\">");
+		stralloc_cats(&page, callers[i].name);
+		stralloc_cats(&page, "</div><div class=\"last10-location\">");
+		stralloc_cats(&page, callers[i].location);
+		stralloc_cats(&page, "</div>");
+		stralloc_cats(&page, "<div class=\"last10-date\">");
 
-	sprintf(buffer, "<div class=\"div-table\">\n");
-	if (len + strlen(buffer) > max_len - 1) {
-		max_len += 4096;
-		page = (char *)realloc(page, max_len);
-	}
-	strcat(page, buffer);
-	len += strlen(buffer);
-
-	for (z = 0; z < i; z++) {
-		localtime_r(&callers[z].time, &l10_time);
-		if (conf.date_style == 1) {
-			if (callers[z].calls == 1) {
-				sprintf(buffer, "<div class=\"last10-row\"><div class=\"last10-name\">%s</div><div class=\"last10-location\">%s</div><div class=\"last10-date\">%.2d:%.2d %.2d-%.2d-%.2d</div><div class=\"last10-new\"><img src=\"%sstatic/newuser.png\" /></div></div>\n", callers[z].name, callers[z].location, l10_time.tm_hour, l10_time.tm_min, l10_time.tm_mon + 1, l10_time.tm_mday, l10_time.tm_year - 100, conf.www_url);
-			} else {
-				sprintf(buffer, "<div class=\"last10-row\"><div class=\"last10-name\">%s</div><div class=\"last10-location\">%s</div><div class=\"last10-date\">%.2d:%.2d %.2d-%.2d-%.2d</div></div>\n", callers[z].name, callers[z].location, l10_time.tm_hour, l10_time.tm_min, l10_time.tm_mon + 1, l10_time.tm_mday, l10_time.tm_year - 100);
-			}
-		} else {
-			if (callers[z].calls == 1) {
-				sprintf(buffer, "<div class=\"last10-row\"><div class=\"last10-name\">%s</div><div class=\"last10-location\">%s</div><div class=\"last10-date\">%.2d:%.2d %.2d-%.2d-%.2d</div><div class=\"last10-new\"><img src=\"%sstatic/newuser.png\" /></div></div>\n", callers[z].name, callers[z].location, l10_time.tm_hour, l10_time.tm_min, l10_time.tm_mday, l10_time.tm_mon + 1, l10_time.tm_year - 100, conf.www_url);
-			} else {
-				sprintf(buffer, "<div class=\"last10-row\"><div class=\"last10-name\">%s</div><div class=\"last10-location\">%s</div><div class=\"last10-date\">%.2d:%.2d %.2d-%.2d-%.2d</div></div>\n", callers[z].name, callers[z].location, l10_time.tm_hour, l10_time.tm_min, l10_time.tm_mday, l10_time.tm_mon + 1, l10_time.tm_year - 100);
-			}
+		localtime_r(&callers[i].time, &called);
+		if (conf.date_style == 1)
+			strftime(buffer, sizeof buffer, "%H:%M %m-%d-%y", &called);
+		else
+			strftime(buffer, sizeof buffer, "%H:%M %d-%m-%y", &called);
+		stralloc_cats(&page, buffer);
+		stralloc_cats(&page, "</div>\n");
+		if (callers[i].calls == 1) {
+			stralloc_cats(&page, "<div class=\"last10-new\"><img src=\"");
+			stralloc_cats(&page, conf.www_url);
+			stralloc_cats(&page, "static/newuser.png\" /></div>");
 		}
-		if (len + strlen(buffer) > max_len - 1) {
-			max_len += 4096;
-			page = (char *)realloc(page, max_len);
-		}
-		strcat(page, buffer);
-		len += strlen(buffer);
+		stralloc_cats(&page, "</div>\n");
 	}
+	stralloc_cats(&page, "</div>\n");
+	stralloc_0(&page);
 
-	sprintf(buffer, "</div>\n");
-	if (len + strlen(buffer) > max_len - 1) {
-		max_len += 4096;
-		page = (char *)realloc(page, max_len);
-	}
-	strcat(page, buffer);
-	len += strlen(buffer);
-
-	return page;
+	return page.s;
 }
 
 #endif