Edit: if the result of applying for a bonus is a database, you can download existing applications on the confirmation screen and verify that it already exists.
Edit: another neat trick you can do is serailize / json_encode $ _POST and create a hash from that, save it in a database or user session and test it.
I would generate and add to the database one use token (hash) for the form as a hidden field, if the post-data is re-deleted, the token would already be used, and you can cancel the request for sending.
source share