Хак: sip звонки пользователям сайта (сторонний сервис)

ALTER TABLE `cms_user_profiles` ADD `callsip` VARCHAR( 5 ) NOT NULL AFTER `city` ;

/////////////////////////////// EDIT PROFILE /////////////////////////////////////////////////////////////////////////////////////////
if ($do=='editprofile'){
 
	if (!$inUser->id) { cmsUser::goToLogin(); }
 
	if ($inUser->id!=$id && !$inUser->is_admin){ cmsCore::error404(); }
 
	$opt = $inCore->request('opt', 'str', 'edit');
 
	$cfg_forum = $inCore->loadComponentConfig('forum');
 
	if ($opt == 'save'){
 
		$errors = false;

$callsip = $inCore->request('callsip', 'str');

$sql = "UPDATE cms_user_profiles 
					SET city = '$city',

callsip = '$callsip',

$sql = "UPDATE cms_user_profiles 
					SET city = '$city',
						callsip = '$callsip',
						description = '$description',
						showmail='$showmail',
						showbirth='$showbirth',
						showicq='$showicq',
						allow_who='$allow_who',
						signature='$signature',
						gender='$gender' $forms_sql,
						email_newmsg='$email_newmsg',
						cm_subscribe='$cm_subscribe'
					WHERE user_id = '$id'";
			$inDB->query($sql) ;

/////////////////////////////// VIEW PROFILE /////////////////////////////////////////////////////////////////////////////////////////

$usr['cityurl']             = urlencode($usr['city']);

///////// Вставка
	$usr['callsip']				= $inDB->get_field('cms_user_profiles', "user_id=$id", 'callsip');
	$usr['callnum']				= strlen($usr['callsip']);
/////////////////////////////////////////////////

<tr>
                        <td valign="top">
                            <strong>{$LANG.CITY}:</strong>
 
                            <span class="usr_edithint">{$LANG.CITY_TEXT}</span>
                        </td>
                        <td valign="top">
                            <input name="city" type="text" id="city" class="text-input" style="width:300px" value="{$usr.city|escape:'html'}"/>
                            <script type="text/javascript">
                                {$autocomplete_js}
                            </script>
                        </td>
                    </tr>

<tr>
                       <td valign="top"><strong>Номер SIP:</strong>
 
			<span class="usr_edithint">Короткий номер, 5 цифр.
Нужно зарегестрировать номер <a href="http://zadarma.com" target="_blank">здесь</a></span>			
			</td>
                       <td valign="top"><input maxlength="5" name="callsip" type="text" id="callsip" style="width:300px" value="{$usr.callsip}"/></td>
                   </tr>
                    <tr>

{literal}
	<script type="text/javascript">
		$(document).ready(function(){
			$("#profiletabs > ul#tabs").tabs();

$("#o_call").click(function(){ $("div#call").slideDown("fast"); });	
$("#c_call").click(function(){ $("div#call").slideUp("fast"); });
$("#t_call span").click(function(){ $("div#t_call span").toggle(); });
$("input#call_cancel").click(function(){ $("div#call").slideUp("fast"); $("div#t_call span").toggle(); });

{literal}
	<script type="text/javascript">
		$(document).ready(function(){
			$("#profiletabs > ul#tabs").tabs();
$("#o_call").click(function(){ $("div#call").slideDown("fast"); });	
$("#c_call").click(function(){ $("div#call").slideUp("fast"); });
$("#t_call span").click(function(){ $("div#t_call span").toggle(); });
$("input#call_cancel").click(function(){ $("div#call").slideUp("fast"); $("div#t_call span").toggle(); });
		});
	</script>
{/literal}

<tr>
                                    <td><img src="/templates/_default_/images/icons/profile/message.png" /></td>
                                    <td><a href="/users/{$usr.id}/sendmessage.html" title="{$LANG.WRITE_MESS}">{$LANG.WRITE_MESS}</a></td>
                                </tr>

<div style="width: inherit;" id="t_call">
    <td><img src="/templates/_ВАШ_ШАБЛОН_/images/icons/profile/call-start.png" /></td>
 <td><span id="o_call" ><a href="#" title="Позвонить">Позвонить</a></span><span id="c_call" style="display: none;" title="Позвонить"><a href="#" title="Позвонить">Позвонить</a></span></td>
</div>
 
<tr>
<td colspan="2" width="195">
	<div class="usr_avatar" style="display:none;font-size:small;background-color:#E0EAEF;" id="call">
	<form action="#" method="POST">
	Вы хотите позвонить пользователю <strong>{$usr.nickname}</strong>?
	{$LANG.IF} <strong>{$usr.nickname}</strong> подымет трубку, вы сможете пообщаться бесплатно
{if $usr.callnum != 5 and $usr.callsip != 4444}
<strong>{$usr.nickname}</strong> не имеет аккаунт для приема звонков{else}
{literal}
<script type="text/javascript" src="http://zadarma.com/swfobject.js"></script> 
<script type="text/javascript"> 
	var flashvars = {};
	flashvars.phone="{/literal}{$usr.callsip}{literal}";
	flashvars.img1="http://zadarma.com/images/but/call3_green_ru_free.png";
	flashvars.img2="http://zadarma.com/images/but/call2_green_ru_connecting.png";
	flashvars.img3="http://zadarma.com/images/but/call2_green_ru_reset.png";
	flashvars.img4="http://zadarma.com/images/but/call2_green_ru_error.png";
	var params = {};
	params.wmode='transparent';
	var attributes = {};
	swfobject.embedSWF("http://zadarma.com/pbutton.swf", "myAlternativeContent", "215", "138", "9.0.0", false, flashvars, params, attributes);
</script> 
{/literal} 
<div id="myAlternativeContent"> 
	<a href="http://www.adobe.com/go/getflashplayer"> 
	<img src="http://www.adobe.com/images/shared/download_buttons/get_flash_player.gif" alt="Get Adobe Flash player" /> 
	</a> 
</div>
{/if} 
 	<div style="text-align:center;">
		<input type="button" id="call_cancel" name="cancel" value="Закрыть" />
	</div>
	</form>						
	</div>
</td>
</tr>
  </tr>
 

{if !$myprofile}...................{/if}