For a particular database users are allowed to view the profiles and redirected to a view.php with the profile id in the url, however every profile shows up, not just the sp