I'd suggest the URLEncode instead... otherwise you'll get& in the file name. By URLEncoding it, you get the %XX where XX is the ascii code (for instance a space comes out as %20). the browser & client should be able to sort it out from there.

-tg