It sounds like the customer is clicking the submit order button more than once on the confirm page.
Either put a note on the confirm page to only click once or you will be charged twice, or disable the submit button when it is clicked using javascript:
<input type="submit" name="button" id="button" value="Submit" onclick="this.disabled = true"/>