Clear the session variable used as the orderID on the Success page. The orderID session variable is set in the Store Cart Summary in Database server behavior on the confirm page.
You could also just clear the entire session, but that would also log the user out.