You seem to be missing your opening form tag.
also mysqli_real_escape_string first param is the connection, second param is the string and you are not selecting a database.
I suggest having a read up on
http://www.w3schools.com/php/func_mysqli_connect.asp
http://www.w3schools.com/php/func_mysqli_real_escape_string.asp