Sudden spike in consumption

[_j]

I’m just some random guy with advice, I cannot observe accounts.

You don’t use particular models but they have usage → someone else is using your models.

Pretty straightforward.

Usually something bad in practice, like hard-coding API keys in code, easily committed to repos or seen by others, or having any client software connect to OpenAI instead of to your own backend, allowing extraction and discovery of keys.

See, for example, this discovery of bad implementation:

Unexpected $67 Token Usage Spike with Models I Never Use

Thank you for your input. I’ve identified and fixed the security issue. The problem was not with PHP itself, but with my implementation - I was controlling the GPT model selection through an unvalidated URL parameter. You were absolutely right about the potential vulnerability. I was using URL parameters to control which GPT model to use without proper validation. I’ve now hardcoded the model to “gpt-3.5-turbo-0125” in my cURL request, removing the ability for anyone to manipulate it through …