Hmmm... maybe try:
<?php
session_start();
session_regenerate_id (true)
session_commit();
?>
It seems like it should work. Maybe us somethign besides the session_id as your orderID... there should also be an autonumber field in the orders database that is stored in the session and unique that shouldn't have this problem.