I think a much better way to do this would be to send a confirmation email first. After the user accepts the confirmation email then it continues with the submission. This would prevent potentially evil stuff from happening.