I think you can do it with a meta tag.
If you want to do server side checking, you can log their IP with the form, then match it against the last record sent, or if they were there before...
<CFQUERY NAME="PastForms">
SELECT TOP 1 *
FROM your_table
</CFQUERY>
<CFIF...