Are you calling the server.transfer from a try catch block?
Try to move the server.transfer call in finally.
The problem with this is if they do a refresh on the page, it actually is going to refresh the submission page, so you may have double entries...
Another option is that on load to get the referer from server variables. If it is not coming from default, then redirect to default or to an error page.

Vlad.