Manual:$wgUpgradeKey/pl

Details
When overridden in, this setting allows you to run upgrades from the web interface. The value of this variable serves as a password protecting the upgrade script.

The installer in 1.17+ adds this variable to LocalSettings.php and fills it with a random 16-character password. If it is not set in LocalSettings.php, the upgrader will tell you what to set it to in order to authorize the upgrade process.

For security, do not set this to a guessable string. Instead, use a secure value, e.g., the one supplied by the installation/upgrade process. To cause the upgrader to generate a new key, delete the old key from LocalSettings.php.