How secure is the following system?

Question

WordPress

Hello. Created LC. There are two inserts - this is information, where the text (user properties) is simply displayed, and there is editing, where inputs are displayed and when they are filled in, the data in the database is updated.
To view other people's personal accounts, I simply pass and compare the id of the current user with the variable $_GET['id']. That is, I pass the ID of the account owner through url. If I follow the same scheme, I just won’t “edit” the insert while watching other people’s personal accounts, will it be safe? Or do you need to do it in a different way altogether?
Thanks in advance!

Answer 1

The main thing is to do checks when saving information. So that only the owner can save information (or also a group of "white IDs" - admins; it's even better to organize roles for this).
Display the "Edit" button also for the same user group.