There a re a few ways:
- If only registered users can vote: Store their uderID in a voted table
- Set a cookie after voting, and varify for the cookie when they try to revote
- Verify IP address against a list of voteed IP addresses.
Each of the options has obvious drawbacks, and you will have to make a choice as to which you like best.
Afaik there is no foolproof way to stop people from doing this completely, without having them sign up (And even then there is nothing stopping people from siging up multiple times)