Graham Waplocus
You had the same issue with + being turned into a space see ($pos 1); and ($count 1);
I don't know why that happens + (or %20) is used to represent a space in url encoded text

There was also still a unconverted > in the template on the end of the include Download" /><

I changed .file_name. in NHead to .file_name_parsed. (fits the box better for long titles)
I changed .file_type. to .file_mime. as for most files .file_type. just shows "default"

I had to move the print to within the xtscript as it seems not to do the include in the template unless it is actually printed from within the script (my bad for that one)
I also had to break it up so that your ad includes were not actually in the xtscript

Your file /Zolo/Scripts/EXT/Download did not need converting to html entities

You had used .Png for the image in the template and it should have been .png plus the image is way too big anyway so I added style="max-width:100%" to keep it in the box