ASP Classic check if Zip Code exists, if not show message

In this example, we will use [ASP Classic] with [VB].
When the user enters their Zip Code into the form, we will do the following.

(Protecting our Database from XSS Attacks)
Date: 07-30-2022 - Name changed of Function from ProtectSQL to ProtectXSS, as it was brought to my attention that saying SQL was misleading.

#1: Use a function that will protect our database from [XSS] attacks called: [ProtectXSS]
#2: Validate the form value against our database.
#3: Protect our Database from [SQL injection] using [Parameterized Queries].
#4: If the Zip Code [Does exist], we will display a message to the user, letting them know that the Zip Code exists
#5: If the ZIP Code [Does not exist], we will display a message indicating it does not exist.

The database includes over 5,000 ZIP Code entries and is available through this Article here: A SQL Server Script for Zip Codes.«
[Section #1:]
The Script will also use a protection method to prevent [XSS] and [SQL Injection], as shown below and demonstrated in the demo code.
Example of the [ProtectXSS] code.
<% chZip = ProtectXSS(Request.Form("Zip")) %>

[Section #2:]
To protect ourselves from SQL Injections, we need to use [Parameterized Queries].
The following unsafe query was rapidly available when I first started learning ASP Classic.
(You can find examples of this poor code all over forums dating back to the late 90s and 2000s.
Select Zip, City, State, County from ZipTable = " & request.form("Zip")

A protected Query for ASP Classic.
sql.commandtext="Select zip, city, state, county from ZipTable where Zip=?" sql.Parameters.Append sql.CreateParameter("@Zip", 200, 1, 255, chZip)

Get the Zip Codes database from here: A SQL Server Script for Zip Codes.«