Use
SelectParameter
<asp:SqlDataSource ID="SqlDataSource3" runat="server"
ConnectionString="<%$ ConnectionStrings:OpticsConnectionString %>"
SelectCommand="SELECT [pro_name],
[pro_purchased_qty], [pro_sale_price], [Purchases_price]
FROM [rpt_UVU_allOrders_In_Details_R] WHERE ([order_id] = @order_id)">
<SelectParameters>
<asp:Parameter Name="order_id" />
</SelectParameters>
</asp:SqlDataSource>
You can apply parameter value from code behind.
<code>
SqlDataSource3.SelectParameters["order_id"].DefaultValue = "value";
</code>
Beside SelectParameter offers few built-in parameter types.