htmlentities, links, javascript

hi all, i have a script that calls a popup like this: <a href="/popup.php?name=Choices&amp;product_id=15" target="_blank" onclick="openWindow(this.href,600,200,'yes'); return false;">Choices</a> the &amp; is there to make sure the page validates. the problem is that some browsers seem to be incorrectly translating this to: [REQUEST_URI] => /popup.php?name=Choices&amp;product_id=15 instead of: [REQUEST_URI] => /popup.php?name=Choices&product_id=15 a couple of browsers that have choked on this: [HTTP_USER_AGENT] => Mozilla/4.0 (compatible; MSIE 4.0; Windows 95) [HTTP_USER_AGENT] => Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/103u (KHTML, like Gecko) Safari/100 i have safari 1.2.1 installed on one of my development machines, and have had no trouble with the bad REQUEST_URIs. does anyone have some insight into the problem? i've posted a demonstration here: http://hartshorne.ca/sandbox.php you'll have to view the source of the popup to see if the & was translated properly. thanks, beau