MYSQLI escape string

[eluser]LifeSteala[/eluser]
You should really be using CI native form validation class and use xss_clean which does all of that automatically. Also using $this->input->post() does the cleaning as well.

Reference:
http://ellislab.com/codeigniter/user-gui...greference
http://ellislab.com/codeigniter/user-gui...input.html