I think Booooze idea would work just fine, for instance here's a sample instead of using a hidden variable using the $_GET superglobal:
if(isset($_GET['foo'])){
... display the table with its updated database values
... display a URL link to the same page but with the submission form
}else{
... display the table
... display the submission form whose action method should go to the same page but appended with '?foo=1'
} This way the user has to consciously click to get to the submission form and submit data, and its still the same page. So even if they keep refreshing no new data is passed.