The &s in URLs should be written & and & in HTML. (reference). If the CGI, etc. you are calling supports it, it would probably be cleaner to use ; instead of & as the parameter seperator. (CGI.pm supports this.)