use JSENCODE, not URLENCODE around payment processor url's.