Looking to fix an issue with Gravity Forms Add-On.
Displaying order form to user through "wp-client" user area.
Customer can alter url and view other orders.
e.g. [obscured] /orders/24
by changing the 24 to 25 the customer can see order 25 even though it is not theirs.
Need quick fix.
Skills: html, mysql administration, php, wordpress, wordpress plugin