that's just a sql*plus default setting. use "set define off" and ampersand is just another character. no need for chr(38)'s