Is this really necessary? user_create does the validation already, see [core/user_api.php:460](https://github.com/mantisbt/mantisbt/blob/master-1.2.x/core/user_api.php#L460).