When you create a recordset, the SQL query will be written out something like this:
$query_Recordset1 = "SELECT * FROM users";
You want to modify this to look something like this:
$query_Recordset1 = sprintf("SELECT * FROM users WHERE userID = %s", GetSQLValueString($_SESSION['OrderUserID'], "int"));