// get value of id that sent from address bar
$id=intval($_Post['id']);
$username = $_Post['username'];
$password = $_Post['password'];
$email = $_Post['email'];

For inserted/updated data use mysql_real_escape_string