prepare("SELECT o.*, r.name as restaurant_name FROM orders o JOIN restaurants r ON o.restaurant_id = r.id WHERE o.id = ? AND o.user_id = ?"); $stmt->execute([$order_id, $user_id]); $order = $stmt->fetch(PDO::FETCH_ASSOC); } elseif ($token) { // Guest access, verify token $stmt = $pdo->prepare("SELECT o.*, r.name as restaurant_name FROM orders o JOIN restaurants r ON o.restaurant_id = r.id WHERE o.id = ? AND o.guest_token = ?"); $stmt->execute([$order_id, $token]); $order = $stmt->fetch(PDO::FETCH_ASSOC); } if (!$order) { include 'header.php'; echo "