I am trying to pass a varible through a URL using $GET
WHERE office_name = '$_GET[office_name]'
However, the variable may contain &
For example the office_name variable could be
Jack & Jill
How can I pass the variable without it messing up the query?