My resolution to this issue was to use %26 in the database for an ampersand, then replace it on the client end with '&'