.env.example

# Vulnerable AI Chatbot Configuration
# Copy this file to .env and configure your settings

# === LLM Configuration ===

# Use OpenAI API? (true/false)
# Set to false to use fallback pattern-matching responses (no API key needed)
USE_OPENAI=false

# OpenAI API Key (get from https://platform.openai.com/api-keys)
# Only required if USE_OPENAI=true
OPENAI_API_KEY=sk-proj-your-api-key-here

# Model to use (if using OpenAI)
# Options: gpt-3.5-turbo, gpt-4, gpt-4-turbo, gpt-4o
MODEL_NAME=gpt-3.5-turbo

# === Server Configuration ===

# Port to run the application on
PORT=5000

# === Notes ===
#
# WITHOUT API KEY (FREE):
# - Set USE_OPENAI=false
# - Uses simple pattern matching for responses
# - Good for basic testing and demos
# - All vulnerabilities still demonstrable
#
# WITH API KEY (PAID):
# - Set USE_OPENAI=true
# - Provide your OPENAI_API_KEY
# - Uses real LLM (more realistic responses)
# - Better demonstrates prompt injection nuances
# - Costs ~$0.001-0.002 per request