Index: user_api.php
===================================================================
--- user_api.php	(revision 4914)
+++ user_api.php	(working copy)
@@ -440,9 +440,19 @@
 				    ( username, email, password, date_created, last_visit,
 				     enabled, access_level, login_count, cookie_string, realname )
 				  VALUES
-				    ( '$c_username', '$c_email', '$c_password', " . db_now() . "," . db_now() . ",
-				     $c_enabled, $c_access_level, 0, '$t_cookie_string', '$c_realname')";
-		db_query( $query );
+				    ( " . db_param(0) . ",
+				      " . db_param(1) . ",
+				      " . db_param(2) . ",
+				      " . db_param(3) . ",
+				      " . db_param(4) . ",
+				      " . db_param(5) . ",
+				      " . db_param(6) . ",
+				      " . db_param(7) . ",
+				      " . db_param(8) . ",
+				      " . db_param(9) . "
+					)";
+		db_query_bound( $query, Array( $c_username, $c_email, $c_password, db_now(), db_now(), 
+					$c_enabled, $c_access_level, 0, $t_cookie_string, $c_realname) );
 
 		# Create preferences for the user
 		$t_user_id = db_insert_id( $t_user_table );