Hi Rich,
>> In my testing I've noticed that an & in the data stream can cause problems (when passing the parameter as a string to the url).
>> Are there other characters that should be off limits?
yes, there are a few. &, <, > " and '
There is a method
string = p_web._jsok(string)
that "sanitizes" the text. This is automatically called for browses and forms and so on, so if you are seeing it cause a problem then let me know where (specifically) the text is so I can check and see.
cheers
Bruce