Line 222:

            prompt = malloc(sizeof(PLEASE_ENTER_PASSWORD + strlen(user)));
            sprintf(prompt, PLEASE_ENTER_PASSWORD, user);

I'm amazed that this does even compile.  ;-)

Change to:
            prompt = malloc(sizeof(PLEASE_ENTER_PASSWORD) + strlen(user));
            sprintf(prompt, PLEASE_ENTER_PASSWORD, user);