I'm not following what you are trying to do here.
It looks like that is a login name / password
which if it is you should NOT pass via $_GET method.
you should not store the password at all in fact, use security tokens for cookies and such.
If profile.php is "my profile" page, then when a user logs in, store their username / user id in a session variable, use that variable to display the information you need.
The login page that proccesses the sql to login should take those $_POST values, and should redirect you to somewhere else afterwards, so the post values disappear
But if you simply want to figure out a way for the url to clear $_GET variables, send the get variables to a page to be stored in sessions, then redirect to that page, or have the page refresh, and use the session variables instead