I have typical problem with session variable

I have developed an application of placing order in rainola.com
Functionally it words fine but if a person surf other web sites and come back to the rainola.com he can still view the order details