diff --git a/www/agc/vdc_db_query.php b/www/agc/vdc_db_query.php
index a91b1756..f9e371a2 100644
--- a/www/agc/vdc_db_query.php
+++ b/www/agc/vdc_db_query.php
@@ -124,10 +124,11 @@
 # 70215-1210 - Added queuemetrics COMPLETEAGENT action
 # 70216-1051 - Fixed double call complete queuemetrics logging
 # 70222-1616 - Changed queue_log PAUSE/UNPAUSE to PAUSEALL/UNPAUSEALL
+# 70309-1034 - Allow amphersands and questions marks in comments to pass through
 #
 
-$version = '2.0.51';
-$build = '70222-1616';
+$version = '2.0.52';
+$build = '70309-1034';
 
 require("dbconnect.php");
 
@@ -1924,6 +1925,8 @@ if ($ACTION == 'updateLEAD')
 	{
 	$comments = eregi_replace("\r",'',$comments);
 	$comments = eregi_replace("\n",'!N',$comments);
+	$comments = eregi_replace("--AMP--",'&',$comments);
+	$comments = eregi_replace("--QUES--",'?',$comments);
 
 	$stmt="UPDATE vicidial_list set vendor_lead_code='" . mysql_real_escape_string($vendor_lead_code) . "', title='" . mysql_real_escape_string($title) . "', first_name='" . mysql_real_escape_string($first_name) . "', middle_initial='" . mysql_real_escape_string($middle_initial) . "', last_name='" . mysql_real_escape_string($last_name) . "', address1='" . mysql_real_escape_string($address1) . "', address2='" . mysql_real_escape_string($address2) . "', address3='" . mysql_real_escape_string($address3) . "', city='" . mysql_real_escape_string($city) . "', state='" . mysql_real_escape_string($state) . "', province='" . mysql_real_escape_string($province) . "', postal_code='" . mysql_real_escape_string($postal_code) . "', country_code='" . mysql_real_escape_string($country_code) . "', gender='" . mysql_real_escape_string($gender) . "', date_of_birth='" . mysql_real_escape_string($date_of_birth) . "', alt_phone='" . mysql_real_escape_string($alt_phone) . "', email='" . mysql_real_escape_string($email) . "', security_phrase='" . mysql_real_escape_string($security_phrase) . "', comments='" . mysql_real_escape_string($comments) . "' where lead_id='$lead_id';";
 		if ($format=='debug') {echo "\n<!-- $stmt -->";}
diff --git a/www/agc/vicidial.php b/www/agc/vicidial.php
index 10981134..44800fa5 100644
--- a/www/agc/vicidial.php
+++ b/www/agc/vicidial.php
@@ -151,10 +151,11 @@
 # 70215-1240 - Added queuemetrics_log_id field for server_id in queue_log
 # 70222-1617 - Changed queue_log PAUSE/UNPAUSE to PAUSEALL/UNPAUSEALL
 # 70226-1252 - Added Mute/UnMute to agent screen
+# 70309-1035 - Allow amphersands and questions marks in comments to pass through
 #
 
-$version = '2.0.122';
-$build = '70226-1252';
+$version = '2.0.123';
+$build = '70309-1035';
 
 require("dbconnect.php");
 
@@ -4269,6 +4270,12 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 // Update vicidial_list lead record with all altered values from form
 	function CustomerData_update()
 		{
+
+		var REGcommentsAMP = new RegExp('&',"g");
+		var REGcommentsQUES = new RegExp("\\?","g");
+		var REGcommentsRESULT = document.vicidial_form.comments.value.replace(REGcommentsAMP, "--AMP--");
+		REGcommentsRESULT = REGcommentsRESULT.replace(REGcommentsQUES, "--QUES--");
+
 		var xmlhttp=false;
 		/*@cc_on @*/
 		/*@if (@_jscript_version >= 5)
@@ -4311,7 +4318,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 			"&alt_phone=" + document.vicidial_form.alt_phone.value + 
 			"&email=" + document.vicidial_form.email.value + 
 			"&security_phrase=" + document.vicidial_form.security_phrase.value + 
-			"&comments=" + document.vicidial_form.comments.value;
+			"&comments=" + REGcommentsRESULT;
 			xmlhttp.open('POST', 'vdc_db_query.php'); 
 			xmlhttp.setRequestHeader('Content-Type','application/x-www-form-urlencoded; charset=UTF-8');
 			xmlhttp.send(VLupdate_query);