the order number is stored in a session variable by the Store order Summary behavior on the confirm page. look in the binding panel, there should be a session binding named "yourCart_OrderID" where your cart is the name of your eCart object.
in the file upload form, create a text box for the order number and set the initial value to use the order number session variable.