When checking out an item to a patron in the staff interface, we have Javascript protecting the barcode field from re-submitting the form while Koha is still processing the checkout. However, we don't have anything preventing the submit button from double-submitting the form. We should protect against all possible methods of double-submitting, not just the barcode input.