And for the benefit of other readers, you can avert this issue entirely by avoiding & in your URL strings. If you're using a proper, robust CGI parameter parser (e.g. CGI.pm), this can be re-written as:

<a href="/f1/show?page=matchup;lid=206;week=8;mid1=2;mid2=8">
[download]

Much cleaner!