[inebriate]

if i recall, you need php 5 or higher to use mysqli...

just switching the commands from mysql to mysqli may not show improvements, in fact it may even be slower...you need to keep in mind that mysqli escapes its strings, so there is no need for the mysql_real_escape_string

i am hoping that xcart would get around to using prepared statements