Well before any output is thrown, set some headers:
header("Cache-Control: no-cache, must-revalidate"); // disable the cache
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT"); // Date in the past so it's expired
Then, in your page, just constantly check to see if there are POSTed vars, if not, display (or redirect to) an error page.
Plus, you could also just empty the $_POST array.....
~Brett