diff --git a/src/plugins/http/src/tgHandle.c b/src/plugins/http/src/tgHandle.c
index ffb2ccb2f932a715da56364069235cd0b98ea0d3..ac3df051fd39f3beef3a4ff445a19d59fbd60829 100644
--- a/src/plugins/http/src/tgHandle.c
+++ b/src/plugins/http/src/tgHandle.c
@@ -303,7 +303,7 @@ bool tgGetUserFromUrl(HttpContext *pContext) {
     return false;
   }
 
-  strcpy(pContext->user, pParser->path[TG_USER_URL_POS].pos);
+  tstrncpy(pContext->user, pParser->path[TG_USER_URL_POS].pos, TSDB_USER_LEN);
   return true;
 }