public ActionResult OrderHistory()
 {
     OrderBLL db = new OrderBLL();
     string id = User.Identity.GetUserId();
     var orderModel = db.getOrderHistory(id);
     return View(orderModel);
 }
        public ActionResult ShowOrder(int id)
        {
            OrderBLL db = new OrderBLL();
            string user = User.Identity.Name;
            bool isValid = db.validateUserPurchase(id, user);

            if (isValid)
            {
                //var total = db.Orders.Find(id);
                var orderModel = db.getOrder(id);
                return View(orderModel);
            }
            else
            {
                return View("Error");
            }
        }