when creating a deck containing an ampersand (EG my deck: shy ronnie (fire & ice)), the & is translated to &
This is probably due to using htmlentities once too much.
Your $_POST data is probaby being htmlentitied in the beginning, and then again before going into the database, or your display code does it again.