
Option 1 , javascript : disable submit button
Option 2 , Post-Redirect-Get pattern : send a redirect after submit
Option 3 , tokening : unique token between client and server
Both option 1 and option 2 have drawbacks , let's see how to implement option 3.