Site Help
Topics
Glossary
Site Map
Many links on the Web Guide are available to EPA Intranet users only. If you are an outside contractor working for EPA, please contact your EPA representative for more information. If you are another federal agency or other party interested in EPA's web policies and procedures, please contact EPA through the "Contact Us" page on this site.
Questions?
Web or WebCMS Questions?
Call the EPA Call Center
1-866-411-4EPA (4372).
Computer Questions?
Call CTS
1-866-955-4CTS (4287).
PDF Disclaimer
You will need Adobe Acrobat Reader to view PDF files. See EPA's PDF page for more information about getting and using the free Acrobat Reader.
Deploy a CGI Script
Note: Beginning on December 1, 2000, new CGI procedures were implemented. Information regarding these procedures can be found on the CGI Documentation page.
While Common Gateway Interface (CGI) scripts can be easily written and deployed on an EPA server, the larger issue is one of security. An improperly written CGI script can introduce security vulnerabilities which hackers can exploit to cause damage to the EPA Public Access and EPA Intranet servers. For this reason, any data provider developing and maintaining "personal" CGI scripts (i.e., those developed for specific application use and from outside NCC) must certify that the scripts are designed and implemented according to established guidelines and security standards.
Note: All form data processing will be handled by the mail.cgi script. This script replaces the form-mail.pl script used to send form data to an email address.
Information 
on the script including use instructions are now located in the Web Guide.
Learn how to format form data sent through the mail.cgi script using a new JavaScript technique.
NCC offers two mechanisms for certifying that your CGI scripts meet "best available technology" methods for program security.
Option 1: Certify and submit a "signed" copy of the CGI Program Security Checklist and Application Deployment Request. This checklist includes a CGI Security FAQ as well as other required reading.
Option 2: Contract NCC services through the Working Capital Fund to have NCC examine and certify your CGI script. This requires funding service XA and completing a statement of work for the task.
