Comment by cryptofistMonk

Presumably order numbers are easily guessable, so the md5 really offers no protection at all in this case and is no better than just using the order number