No idea how to refactor this into Code Igniter

[eluser]Rick Jolly[/eluser]
mysqli_escape_string() is for mysql. It escapes special database characters (') and prevents sql injection. If you need to display the $_POST data then you should use xss_clean or html purifier. If you trust your users, then at the very least use htmlspecialchars() so your html doesn't get corrupted.

Your code looks great. I'd just put the email stuff in a library.