Webpage user id attacks

I am new to website security and in my website I can access other profiles by just changing the url a bit and adding a different user id. How do I fix that.