# Strata GPO Platform — Cache Busting Only
# Upload as .htaccess ONLY if no existing .htaccess on server
# If server already has one, APPEND these rules to it instead
# ============================================================

# --- CORS for API ---
<IfModule mod_headers.c>
  <Files "api.php">
    Header set Access-Control-Allow-Origin "*"
    Header set Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
    Header set Access-Control-Allow-Headers "Content-Type"
  </Files>
</IfModule>

# --- Cache Busting: NEVER cache HTML files ---
<IfModule mod_headers.c>
  <FilesMatch "\.(html|htm)$">
    Header set Cache-Control "no-cache, no-store, must-revalidate"
    Header set Pragma "no-cache"
    Header set Expires "0"
  </FilesMatch>
</IfModule>

# --- Cache Busting: PHP files also no-cache ---
<IfModule mod_headers.c>
  <FilesMatch "\.php$">
    Header set Cache-Control "no-cache, no-store, must-revalidate"
    Header set Pragma "no-cache"
    Header set Expires "0"
  </FilesMatch>
</IfModule>