"So anyone is able to scroll through all the real name of my students, just using the link /user/profile.php?id=XXX and increasing the ID number."
They're definitely not. Read the User_profiles page, carefully.
General help
How to prevent students to open user/profile.php
This discussion has been locked so you can no longer reply to it.