Don't use mysql_real_escape_string() in BP_User_Query

Fixes #5432

Props imath

git-svn-id: https://buddypress.svn.wordpress.org/trunk@7993 cdf35c40-ae34-48e0-9cc9-0c9da1808c22