Manual:$wgUpgradeKey

Details
When overridden in LocalSettings.php, this setting allows to run upgrades from web interface. This variable's value serves as password protecting the upgrade script.

Installer in 1.17+ adds this variable to LocalSettings.php and fills it with a random password, but leaves it commented out. If you're intending to use web-based upgrades, uncomment it (or add it if your LocalSettings.php was created by an earlier version of MediaWiki).

For security, do not set this to a guessable string. Use the value supplied by the install/upgrade process. To cause the upgrader to generate a new key, delete the old key from LocalSettings.php.