ajax中请求参数应写在哪里,如何在ajax中发送“＆”作为请求参数

我使用jQuery代码将表单数据传递给php，然后php代码将数据保存到mysql数据库中。如果标题为"how to save & to mysql database using php"，那么标题将作为"how to save"存储在数据库中。我怎样才能解决这个问题？如何在ajax中发送“＆”作为请求参数

这里是我的JS代码

var dataString = 'title='+ title + '&url=' + url + '&description=' + description + '&published=' + published+ '&catid=' + catid;

//alert (dataString);return false;

$.ajax({

type: "POST",

url: "process.php",

data: dataString,

success: function() {

$(".button").hide();

$('#messages').html("

$('#message').html("

weblink Form Submitted!

")

.hide()

.fadeIn(1500, function() {

$('#message');

});

}

});

和PHP代码

$con = mysql_connect("localhost","db","pass");

if (!$con)

{

die('Could not connect: ' . mysql_error());

}

mysql_select_db("dalanrep_dalanreportcom", $con);

$title = mb_convert_encoding(trim($_POST['title']),'HTML-ENTITIES', 'UTF-8');

$url = mb_convert_encoding(trim($_POST['url']),'HTML-ENTITIES', 'UTF-8');

$description = mb_convert_encoding(trim($_POST['description']),'HTML-ENTITIES', 'UTF-8');

$published = mb_convert_encoding(trim($_POST['published']),'HTML-ENTITIES', 'UTF-8');

$catid = mb_convert_encoding(trim($_POST['catid']),'HTML-ENTITIES', 'UTF-8');

$title =mysql_escape_string($title);

$url = mysql_escape_string($url);

$description = mysql_escape_string($description);

$sql="INSERT INTO table (title, url, description,catid)

VALUES ('$title','$url','$description','$catid')";

if (!mysql_query($sql,$con))

{

die('Error: ' . mysql_error());

}

echo "1 record added";

2010-11-04

FDI