Instant Messege issue for 6.16

When opening Instant Messenger window, it shows all parameters on address bar like:

"ray/index.php?module=im&app=user&sender=10&password=0b0cfc07fca81c956ab9181d8576f4a8&recipient=3

I want to block the chance that people send sms to anyone(even offline) by copying above codes and changing recipient id, 

Is there a way to hide those parameters  and make it shows only "ray/index.php?module=im" on address bar?

[Nathan Paton: Updated MD5 hash]

The only way is by actually re-writing the code so it sends those parameters through POST instead of the command line. 

 To hide those parameters, I think some modificaiton needed in "ray\modules\global\js\integration.js", can someone indicate how to change? below is the orignial code. ( location=0 don't hide the address bar)

function openRayWidget(sModule, sApp) {

if(aRayApps[sModule][sApp] == undefined)return;

var aInfo = aRayApps[sModule][sApp];

var sUrl = sRayUrl + "index.php?module=" + sModule + "&app=" + sApp;

for(var i=0; i<arguments.length - 2; i++)

sUrl += "&" + aInfo["params"][i] + "=" + arguments[i + 2];

var popupWindow = window.open(sUrl, 'Ray_' + sModule + '_' + sApp + parseInt(Math.random()*100000), 'top=' + aInfo["top"] + ',left=' + aInfo["left"] + ',width=' + aInfo["width"] + ',height=' + aInfo["height"] + ',toolbar=0,directories=0,menubar=0,status=0,location=0,scrollbars=0,titlebar=0,resizable=' + aInfo["resizable"]);

if( popupWindow == null )

alert( "You should disable your popup blocker software" );

}