2008-08-07, 04:57 PM
inc/datahandlers/post.php:
$emailmessage = $lang->sprintf($emailmessage, $subscribedmember['username'], $post['username'], $mybb->settings['bbname'], $subject, $excerpt, $mybb->settings['bburl'], get_thread_link($thread['tid'], 0, "newpost"), $thread['tid'], $subscribedmember['subscriptionkey']);
The function get_thread_link() returns the htmlspecialchar'ed URL to the thread. Because of that & shows up as & in notifications mails: showthread.php?tid=123&action=newpost