I am pretty sure I understand your question, but I don't quite understand your example.

I think you are saying that someone could enter order ids and pull up other people's orders. I know that...