# 禁止直接访问提交数据
<IfModule mod_authz_core.c>
  <Files "submissions.json">
    Require all denied
  </Files>
</IfModule>

<IfModule !mod_authz_core.c>
  <Files "submissions.json">
    Order allow,deny
    Deny from all
  </Files>
</IfModule>

# HTML/PHP 页面不缓存，静态资源可长期缓存（靠 ?v= 版本号更新）
<IfModule mod_headers.c>
  <FilesMatch "\.(html|php)$">
    Header set Cache-Control "no-cache, no-store, must-revalidate"
    Header set Pragma "no-cache"
    Header set Expires "0"
  </FilesMatch>
  <FilesMatch "\.(css|js|png|jpg|jpeg|svg|webp)$">
    Header set Cache-Control "public, max-age=31536000, immutable"
  </FilesMatch>
</IfModule>