Replaced & with & in export_entire_form_as_url_vars. The & expansion really should be done with ad_quotehtml by the templating system before spitting out the HTML, not here. It causes other trouble, e.g. double-escaping of & as in &, which causes the URL to not work correctly.