diff --git a/router/api.js b/router/api.js
index fba8eec..76408a8 100644
--- a/router/api.js
+++ b/router/api.js
@@ -51,12 +51,12 @@ module.exports = (fastify, opts, done) => {
       const data = JSON.parse(val);
       const gen_wpt = (name,desc,latlon,icon="Flag") => `<wpt lat="${latlon[0]}" lon="${latlon[1]}"><ele>0</ele><name>${name}</name><cmt>-</cmt><desc>${desc}</desc><sym>${icon}</sym></wpt>`
       data.main.forEach(a => {
-        file+= gen_wpt(a.hotel.name, a.hotel.notes.replace("\n","... ").replace("&","\&"), a.hotel.latlon, icon="Hotel");
+        file+= gen_wpt(a.hotel.name, a.hotel.notes.replace("\n","... ").replace("&","\\&"), a.hotel.latlon, icon="Hotel");
         a.places.restaurants.forEach(b => {
-          file+= gen_wpt(b.name, b.notes.replace("\n","... ").replace("&","\&"), b.latlon, icon="Restaurant");
+          file+= gen_wpt(b.name, b.notes.replace("\n","... ").replace("&","\\&"), b.latlon, icon="Restaurant");
         });
         a.places.activities.forEach(b => {
-          file+= gen_wpt(b.name, b.notes.replace("\n","... ").replace("&","\&"), b.latlon, icon="Tree");
+          file+= gen_wpt(b.name, b.notes.replace("\n","... ").replace("&","\\&"), b.latlon, icon="Tree");
         });
       });
       file+="</gpx>";