Mysql statement error

function saveOrder()
{
	
	$sid = session_id();
	$orderId       = 0;
	$shippingCost  = 5;
	
	    extract($_POST);
		
		// make sure the first character in the 
		// customer and city name are properly upper cased
		$hidShippingFirstName = ucwords($hidShippingFirstName);
		$hidShippingLastName  = ucwords($hidShippingLastName);
	
		$hidShippingCity      = ucwords($hidShippingCity);
	
				
		//$cartContent = getCartContent();
		//$numItem     = count($cartContent);
		
		$cart_check =  mysql_query("select * from tbl_cart where ct_session_id ='". $sid ."'");
	
	
	
	$cart_exist = mysql_fetch_array($cart_check);
		
		$items = $cart_exist[pd_id];
		
		
		// save order & get order id
		$sql = mysql_query("INSERT INTO tbl_order(od_date, od_last_update, od_shipping_first_name, od_shipping_last_name, od_shipping_address1, 
		                     od_shipping_address2, od_shipping_phone, od_shipping_state, od_shipping_city, od_shipping_postal_code, od_shipping_cost)
                                      
        VALUES (NOW(), NOW(), '".$hidShippingFirstName."'', '".$hidShippingLastName."', '".$hidShippingAddress1."', 
   '".$hidShippingAddress2."', '".$hidShippingPhone."', '".$hidShippingState."', '".$hidShippingCity."', '".$hidShippingPostalCode."', '".$shippingCost."')");
					
				
				//echo "inserted";
		// get the order id
		$orderId = mysql_insert_id();
		
		if ($orderId) {
			// save order items
			for ($i = 0; $i < $numItem; $i++) {
				$sql = "INSERT INTO tbl_order_item(od_id, pd_id)
						VALUES ('".$orderId."', '".$items."')";
				$result = mysql_query($sql);					
			}
		
			
			
			
			// then remove the ordered items from cart
			for ($i = 0; $i < $numItem; $i++) {
				$sql = "DELETE FROM tbl_cart
				        WHERE ct_session_id = '".$sid."'";
				$result = mysql_query($sql);					
			}							
		}					
	//}
	
	return $orderId;
}