CodeIgniter is strip slashing the quotes and vulnerable scripts when using active records rather than running direct SQL queries.. So no wories for using Active records...
mysql_real_escape_string and some checks are done internally when its generating the SQL query to run..