I am assuming that if a user is going to be able to update multiple records in your table, there is some field with unique values to that user.
If your table has a user_id field or something, just issue a normal UPDATE query.
$sql = "UPDATE mytable SET order_id = '" . $POST['order_id'] . "' WHERE user_id = '" . $POST['user_id'] . "'";
This will update all the records with the user id that you passed.