$stmt = $conn->prepare("INSERT INTO `users` (`UserName`, `UserPassword`) VALUES (?, ?)");

$stmt->bind_param("ss", $username, $password);

$username = $conn->real_escape_string($_POST['usernameSignup']);
// hash new password
$password = $conn->real_escape_string(password_hash($_POST['passwordSignup'], PASSWORD_DEFAULT));