rewriting return-path?

[vandal]

anyone know how i can use a php script to force my return path not to be [email protected] (who owns the php script).

i am trying to do a send to a friend thing and it gets junk mailed.

exim seems to ignore my return-path headers.

any ideas?