Using [ASP Classic][VB] version, we will look up the US Zip Code to find any zip code in the US in this easy-to-use code.
In this example, we will use [ASP Classic] with [VB]. When the user enters their Zip Code into the form, we will do the following.
Live Lessons Example - ASP Classic check if Zip Code exists, if not show message
(Protecting our Database from XSS Attacks) Date: 07-30-2022 - Name changed of Function from ProtectSQL to ProtectXSS, as it was brought to my attention that saying SQL was misleading.
#1: Use a function that will protect our database from [XSS] attacks called: [ProtectXSS] #2: Validate the form value against our database. #3: Protect our Database from [SQL injection] using [Parameterized Queries]. #4: If the Zip Code [Does exist], we will display a message to the user, letting them know that the Zip Code exists #5: If the ZIP Code [Does not exist], we will display a message indicating it does not exist.
The database includes over 5,000 ZIP Code entries and is available through this Article here: A SQL Server Script for Zip Codes.«[Section #1:] The Script will also use a protection method to prevent [XSS] and [SQL Injection], as shown below and demonstrated in the demo code. Example of the [ProtectXSS] code.
[Section #2:] To protect ourselves from SQL Injections, we need to use [Parameterized Queries]. The following unsafe query was rapidly available when I first started learning ASP Classic. (You can find examples of this poor code all over forums dating back to the late 90s and 2000s.