diff --git a/backend/public/restore_sessions.php b/backend/public/restore_sessions.php
new file mode 100644
index 0000000..1078490
--- /dev/null
+++ b/backend/public/restore_sessions.php
@@ -0,0 +1,55 @@
+<?php
+// Secure token check to prevent unauthorized execution
+if (($_GET['token'] ?? '') !== 'restore_nabeh_9281') {
+    http_response_code(403);
+    die('Unauthorized');
+}
+
+require_once dirname(__DIR__) . '/app/bootstrap.php';
+
+use App\Core\Database;
+
+header('Content-Type: text/plain; charset=utf-8');
+
+echo "=== Restoring WhatsApp Sessions ===\n\n";
+
+$sessions = Database::select("SELECT * FROM whatsapp_sessions WHERE status = 'connected'");
+
+if (empty($sessions)) {
+    echo "No connected sessions found in the database.\n";
+    exit;
+}
+
+$gatewayUrl = rtrim(getenv('WHATSAPP_GATEWAY_URL') ?: 'http://localhost:3722', '/');
+if (substr($gatewayUrl, -4) === '/api') {
+    $startUrl = substr($gatewayUrl, 0, -4) . '/api/sessions/start';
+} else {
+    $startUrl = $gatewayUrl . '/api/sessions/start';
+}
+$appUrl = rtrim(getenv('APP_URL') ?: 'https://nabeh.intaleqapp.com', '/');
+
+foreach ($sessions as $session) {
+    echo "Restoring session: {$session['session_key']} for company ID: {$session['company_id']}...\n";
+    
+    $payload = json_encode([
+        'session_key' => $session['session_key'],
+        'webhook_url' => $appUrl . '/api/whatsapp/webhook'
+    ]);
+    
+    $ch = curl_init($startUrl);
+    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+    curl_setopt($ch, CURLOPT_POST, true);
+    curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);
+    curl_setopt($ch, CURLOPT_HTTPHEADER, [
+        'Content-Type: application/json',
+        'X-Webhook-Secret: ' . getenv('WEBHOOK_SECRET')
+    ]);
+    curl_setopt($ch, CURLOPT_TIMEOUT, 10);
+    $res = curl_exec($ch);
+    $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+    curl_close($ch);
+    
+    echo "Response (HTTP {$httpCode}): {$res}\n\n";
+}
+
+echo "=== Sessions Restore Complete ===\n";