diff --git a/backend/core/Auth/RateLimiter.php b/backend/core/Auth/RateLimiter.php
index 157d22ee..f6864eae 100644
--- a/backend/core/Auth/RateLimiter.php
+++ b/backend/core/Auth/RateLimiter.php
@@ -56,6 +56,10 @@ class RateLimiter
     // ── تطبيق الحد وإيقاف الطلب إن تجاوز ─────────────────────
     public function enforce(string $identifier, string $type = 'api'): void
     {
+        if (getenv('DISABLE_RATE_LIMITER') === 'true' || ($_ENV['DISABLE_RATE_LIMITER'] ?? '') === 'true') {
+            return;
+        }
+
         if (!$this->check($identifier, $type)) {
             $limit  = self::LIMITS[$type] ?? self::LIMITS['api'];
             $window = $limit['window'];