this page is set to use the session id for the order number.
Order number: <?php echo session_id() ?>
on the confirm page, look at the store ordersummary behavior in the store as section, this sets a session variable to use for the order ID, use the binding for that session variable on the success page instead of the session ID.