Manual:$wgDisableUploads/en

Details
If set, disables the upload page and hides the link. Note that downloads have to be set up correctly in order to be secure, so this setting allows you to disable the feature if you are worried about security.

Since v1.5.0 $wgDisableUploads has been deprecated in favour of $EnableUploads.