To avoid that problem instead of using the $_GET["id"] just send them to profile.php and have it call the data using the session var, or if you don't want to be lazy and change what you have now (and this is bad form but it works
):
PHP Code:
$_GET["id"] = $_SESSION["ID"];