postcode check script

function save_profile_date($ident = "", $lang = "", $address = "", $pc = "", $city = "", $country = "", $phone = "", $fax = "", $hp = "", $notes = "", $field1 = "", $field2 = "", $field3 = "", $field4 = ""){
   //zip code check here....
    $work = mysql_query("SELECT * FROM zipdata where zipcode = '$pc' ") or die (mysql_error());
    $result = mysql_fetch_array($work);
    if ($result['zipcode'] != $pc) {$this->the_msg = $this->extra_text(4);
    return;
    }
    else {
   {
    if (!empty($ident)) {
       $sql = sprintf("UPDATE %s SET language=%s, address=%s, postcode=%s, city=%s, country=%s, phone=%s, fax=%s, homepage=%s, notes=%s, %s=%s, %s=%s, %s=%s, %s=%s, user_info=NOW() WHERE id = %s AND users_id = %d",
        PROFILE_TABLE, $this->ins_string($lang), $this->ins_string($address), $this->ins_string($pc),
        $this->ins_string($city), $this->ins_string($country), $this->ins_string($phone), $this->ins_string($fax),
        $this->ins_string($hp), $this->ins_string($notes), TBL_USERFIELD_1, $this->ins_string($field1),
        TBL_USERFIELD_2, $this->ins_string($field2), TBL_USERFIELD_3, $this->ins_string($field3),
        TBL_USERFIELD_4, $this->ins_string($field4), $this->ins_string($ident, "int"), $_SESSION['user_id']);
    } else {
      $sql = sprintf("INSERT INTO %s (id, users_id, language, address, postcode, city, country, phone, fax, homepage, notes, %s, %s, %s, %s, last_change) VALUES (NULL, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, NOW())",
        PROFILE_TABLE, TBL_USERFIELD_1, TBL_USERFIELD_2, TBL_USERFIELD_3,
        TBL_USERFIELD_4, $_SESSION['user_id'], $this->ins_string($lang), $this->ins_string($address),
        $this->ins_string($pc), $this->ins_string($city), $this->ins_string($country), $this->ins_string($phone),
        $this->ins_string($fax), $this->ins_string($hp), $this->ins_string($notes), $this->ins_string($field1),
        $this->ins_string($field2), $this->ins_string($field3), $this->ins_string($field4));
    } 
    if (mysql_query($sql) or die (mysql_error())) {
      $this->profile_id = (empty($_SESSION['is_rec'])) ? mysql_insert_id() : $ident;
      $this->the_msg = $this->extra_text(2);
    } else {
      $this->the_msg = $this->extra_text(3);
    }
  }  } }