security check on orders