Line 186:

SET user_avatar = '" . $db-sql_escape($avatar_filename) . "', user_avatar_type = '1'

there is a syntax error. after $db is on - and should be ->

I have fixed it, thanks for reporting.