This could be an issue with the Session variable not being set correctly in the first place, or an issue with the query itself not returning a result.
I'd first confirm that the Session variable is being set and is available. Then I'd use:
<?php echo($rsCONFIRMORDER->debugSQL()); ?>
And then copy/paste the result into your phpMyAdmin to see if it has a result. I'm not sure if the session variable is the issue or the Query or how you have it populated on the page. If the query returns the correct result and the session appears to be set, then then issue is with how you are using the recordset to populate the form.