diff --git a/customer-qr-admin-batch.php b/customer-qr-admin-batch.php
new file mode 100644
index 0000000..2bd2c1a
--- /dev/null
+++ b/customer-qr-admin-batch.php
@@ -0,0 +1,122 @@
+<?php
+$piwigo_root = realpath(dirname(__DIR__, 2));
+if ($piwigo_root === false)
+{
+  http_response_code(500);
+  exit;
+}
+
+define('PHPWG_ROOT_PATH', rtrim($piwigo_root, DIRECTORY_SEPARATOR).DIRECTORY_SEPARATOR);
+include_once(PHPWG_ROOT_PATH.'include/common.inc.php');
+
+if (!defined('BRATONIEN_TOOLS_PATH'))
+{
+  http_response_code(404);
+  exit;
+}
+
+check_status(ACCESS_ADMINISTRATOR);
+require_once(BRATONIEN_TOOLS_PATH.'include/customer_qr_upload.inc.php');
+
+if (!class_exists('ZipArchive'))
+{
+  http_response_code(500);
+  header('Content-Type: text/plain; charset=utf-8');
+  exit('ZIP-Unterstützung ist auf diesem Server nicht verfügbar.');
+}
+
+bratonien_tools_customer_qr_ensure_storage();
+$limits = bratonien_tools_customer_qr_year_limits();
+$table = bratonien_tools_customer_qr_table();
+$requested_year = isset($_GET['year']) && $_GET['year'] !== '' ? bratonien_tools_customer_qr_year($_GET['year']) : 0;
+
+$query = 'SELECT upload_year, code_number, stored_name FROM `'.$table.'`';
+if ($requested_year > 0)
+{
+  $query .= ' WHERE upload_year='.(int)$requested_year;
+}
+$query .= ' ORDER BY upload_year ASC, CAST(code_number AS UNSIGNED) ASC, id ASC';
+
+$result = pwg_query($query);
+$files = array();
+$root = bratonien_tools_customer_qr_storage_root();
+while ($row = pwg_db_fetch_assoc($result))
+{
+  $year = (int)$row['upload_year'];
+  if (!isset($limits[$year]))
+  {
+    continue;
+  }
+
+  $number = bratonien_tools_customer_qr_number_for_year($year, $row['code_number']);
+  $stored_name = (string)$row['stored_name'];
+  if ($stored_name === '' || basename($stored_name) !== $stored_name)
+  {
+    continue;
+  }
+
+  $path = $root.DIRECTORY_SEPARATOR.$year.DIRECTORY_SEPARATOR.$stored_name;
+  if (!is_file($path) || !is_readable($path))
+  {
+    continue;
+  }
+
+  $extension = strtolower((string)pathinfo($stored_name, PATHINFO_EXTENSION));
+  if (!in_array($extension, array('png', 'jpg', 'jpeg', 'webp', 'gif'), true))
+  {
+    continue;
+  }
+
+  $width = max(2, strlen((string)$limits[$year]));
+  $archive_name = 'qr-'.str_pad($number, $width, '0', STR_PAD_LEFT).'.'.$extension;
+  if ($requested_year === 0)
+  {
+    $archive_name = $year.'/'.$archive_name;
+  }
+
+  $files[] = array(
+    'path' => $path,
+    'archive_name' => $archive_name,
+  );
+}
+
+if (empty($files))
+{
+  http_response_code(404);
+  header('Content-Type: text/plain; charset=utf-8');
+  exit('Keine QR-Codes für den Batch-Download vorhanden.');
+}
+
+$temp = tempnam(sys_get_temp_dir(), 'bratonien-qr-');
+if ($temp === false)
+{
+  http_response_code(500);
+  exit;
+}
+
+$zip = new ZipArchive();
+if ($zip->open($temp, ZipArchive::CREATE | ZipArchive::OVERWRITE) !== true)
+{
+  @unlink($temp);
+  http_response_code(500);
+  exit;
+}
+
+foreach ($files as $file)
+{
+  $zip->addFile($file['path'], $file['archive_name']);
+}
+$zip->close();
+
+$download_name = $requested_year > 0
+  ? 'qr-codes-'.$requested_year.'.zip'
+  : 'qr-codes-alle-jahre.zip';
+
+header('Content-Type: application/zip');
+header('Content-Length: '.filesize($temp));
+header('Content-Disposition: attachment; filename="'.$download_name.'"');
+header('Cache-Control: private, no-store, max-age=0');
+header('X-Content-Type-Options: nosniff');
+readfile($temp);
+@unlink($temp);
+exit;