Do also remember that the CGI script should validate what it gets from the form. Remember that the user can save the form on his/her machine, alter the numbers in the saved page, and then submit the altered form. "Gee, I don't think signed is worth $10.00. I'll make it $0.00."

Never trust the browser.

You're probably already doing this, but a reminder never hurts.