Forum OpenACS Q&A: Signed form vars

How well protected are ad_form signed variables? And, if surgery is performed on the variable values before submission and that causes the sign verification to fail, what happens? What does the user see and what do I, as a programmer see?