Compute the zipcode list prior to the query, and cfdump it to
make sure it is in the form "zip1,zip2,zip3, .." (comma separated
numbers with no spaces and no embedded quotes). Then use the
variable containing the list as the value of a cfqueryparam tag, to
make sure it is properly interpreted by the database driver, e.g.
if the well-formed list is in var zipList ..