$i=0;
foreach($_SESSION['products'] as $key=>$val)
{
if ($i==0){$query="INSERT INTO orders (cart_order_id, order_number, products_id, username, order_status, total, card_holder_name, street_address, zip, disdetails, order_main) VALUES ('$order_number', 'NULL', '$val', '$user', 'AWAITING PAYMENT', 'NULL', 'N/A', 'N/A', 'N/A', 'PENDING PAYMENT', 'OPEN')";
$result=mysql_query($query);$i=0;}
}
echo "Order $order_number<br>";
?>
This keeps adding the session ID as a product, can anyone see y?