I might do something like this:
<?php
$url = (isset($_GET['id'])) ? '?id=' . (int) $_GET['id'] : '';
?>
<form action="<?php echo $_SERVER['PHP_SELF'].$url; ?>" method="post">
(I'm assumig the ID will always be an integer, thus my use of (int) as a quick way to screen out URL injections.)